Issues

• CVE-2026-85393: node-forge-1.4.0.tgz: 1 vulnerabilities (highest severity is: 7.5)

  digitalbazaar/forge#1154 · Filter by author iprasla opened on Sep 14, 2026
  1

• RSA PKCS#1 v1.5 signature forgery via garbage in DigestAlgorithm (incomplete CVE-2026-33894 fix)

  digitalbazaar/forge#1149 · Filter by author geo-chen opened on Jul 6, 2026
  2

• Forge accepts a certificate whose serial number is zero

  digitalbazaar/forge#1147 · Filter by author Jennifer-first opened on Jun 9, 2026

• Forge parsed a cert without error. But ZCertificate reported the error that the modulus is not a positive number

  digitalbazaar/forge#1146 · Filter by author Jennifer-first opened on Jun 9, 2026

• Forge accept a certificate with version 1 and extension fields

  digitalbazaar/forge#1145 · Filter by author Jennifer-first opened on Jun 9, 2026

• Forge accepts a cert which has no subjectAltName and an empty subject

  digitalbazaar/forge#1144 · Filter by author Jennifer-first opened on Jun 9, 2026

• Forge doesn't validate version field when parsing RSA PRIVATE KEY PEM

  digitalbazaar/forge#1143 · Filter by author Jennifer-first opened on Jun 9, 2026

• Support for UUID OIDs in X509v3 extensions

  digitalbazaar/forge#1135 · Filter by author robby-cornelissen opened on Feb 12, 2026
  1

• Add PCKS#12 tests related to macData.

  digitalbazaar/forge#1129 · Filter by author davidlehn opened on Dec 2, 2025

• Possible Memory Leak: Detached <div> and MutationObservers Referenced in node-forge

  digitalbazaar/forge#1126 · Filter by author last-Programmer opened on Nov 26, 2025
  3

• Is there any plan to keep alive this project?

  digitalbazaar/forge#1123 · Filter by author aldex32 opened on Nov 21, 2025

• Deprecation warning with VS Code extensions using Node.js v20+: "navigator is now a global in nodejs"

  digitalbazaar/forge#1122 · Filter by author EhabY opened on Nov 10, 2025

• Minor bug in RC2 key expansion function

  bug
  digitalbazaar/forge#1120 · Filter by author Martomate opened on Aug 13, 2025
  2

• CaStore fails if certificates use anything other than RSA

  digitalbazaar/forge#1119 · Filter by author EmperorArthur opened on Aug 6, 2025

• will someone get rid of "swf" (shockwave flash) file.....

  digitalbazaar/forge#1118 · Filter by author fred410 opened on Jul 22, 2025
  1

• TypeError due to URL(window.location.href) after upgrading to node-forge 1.3.1

  digitalbazaar/forge#1117 · Filter by author elshadsm opened on Jul 3, 2025
  1

• How can I use this with Direct Sockets TCPServerSocket in the browser?

  digitalbazaar/forge#1114 · Filter by author guest271314 opened on Jun 8, 2025
  1

• X.509 Certificate support for ED25519 Keys

  digitalbazaar/forge#1113 · Filter by author AndyMic03 opened on Apr 28, 2025

• "7 is not a function" cipher.createCipher('AES-CBC', ...)

  digitalbazaar/forge#1112 · Filter by author svenlombaert opened on Apr 25, 2025
  1

• "Cannot read properties of undefined (reading 'length')" when trying to work with output of pki.decryptRsaPrivateKey

  digitalbazaar/forge#1109 · Filter by author ostrolucky opened on Feb 16, 2025
  3

• activated code

  digitalbazaar/forge#1108 · Filter by author mgs2113 opened on Jan 21, 2025

• Error: Encryption block is invalid

  digitalbazaar/forge#1107 · Filter by author 0zzone opened on Jan 16, 2025
  1

• 'Encrypted message length is invalid.' using node-forge to decrypt the message encrypted from jsencrypt

  digitalbazaar/forge#1102 · Filter by author helxsz opened on Nov 28, 2024
  2

• CSR: Bad UTF-8 parsing from PEM even when using forge.asn1.Type.UTF8

  digitalbazaar/forge#1100 · Filter by author dari-us opened on Nov 15, 2024
  1

• Self signed CA signing a self signed certificate causes a ERR_SSL_SERVER_CERT_BAD_FORMAT

  digitalbazaar/forge#1099 · Filter by author Arlisaha opened on Oct 23, 2024