Forge is a native JavaScript implementation of the TLS protocol, along with a collection of cryptography utilities and tools for building web apps that use many network resources. It’s useful for developers who need TLS client and server features in JavaScript, plus supporting crypto capabilities like X.509 and common PKCS standards, message digests, and ciphers.
A status summary will appear after the next weekly refresh.
Recent updates
v1.4.0
node-forge v1.4.0 introduces multiple security hardening changes in cryptographic verification code (RSA PKCS#1 v1.5, Ed25519, BigInteger/jsbn) and stricter certificate chain validation (basicConstraints enforcement). It also adds support for the OID 2.5.4.65 (pseudonym) and updates the bundled jsbn code to a newer synced variant.
BreakingSecurityFeaturesv1.3.3
Release v1.3.3 contains a small PKCS#12 parsing fix. There were no publisher-provided release notes in the input, so the only observable changes come directly from the code diff.
v1.3.2
Release v1.3.2 was published on 2025-11-25, but the publisher did not include any release notes. No documented changes, bug fixes, security updates, or migration guidance are available in the provided data.
v1.3.1
v1.3.1 makes a targeted change to RSA RSASSA-PKCS1-v1_5 DigestInfo validation, specifically around whether DigestAlgorithm NULL parameters are required or optional. No release notes were provided for this version, but the changelog and code changes indicate behavioral enforcement changes for md2 and md5 during signature verification.
v1.3.0
v1.3.0 introduces significantly stricter DER parsing and RSA PKCS#1 v1.5 signature verification behavior. The changes primarily tighten ASN.1 parsing (defaulting to consuming all input bytes) and enforce stricter DigestInfo structure and digest algorithm validation during verification.
SecurityFeaturesv1.2.1
Release v1.2.1 contains small internal fixes. Code changes focus on test loading and a refactor to the browser URL query parsing used for console log level overrides.
v1.2.0
Release v1.2.0 refactors X.509 signature digest computation and signature verification logic, and it adds support for an additional SHA-1 with RSA signature OID alias. It also corrects the assignment of expected vs actual issuer fields in a certificate issuance verification error. Release notes were not provided by the publisher, so the code changes below are not documented in the provided release notes.
v1.1.0
v1.1.0 includes targeted fixes around PEM decoding of certificate requests and X.509 certificate hashing. The provided publisher release notes are empty, but the changelog and code changes indicate behavior adjustments in PEM CSR label handling and in how cert.issuer.hash and cert.subject.hash are computed.
v1.0.0
No publisher release notes were provided for v1.0.0 (the release_notes block states none were provided). The code diff shows a major v1.0.0 refactor, most notably removing several previously exposed utility/debug/task APIs and switching HTTP/XHR URL handling to the WHATWG `URL` standard.
SecurityFeatures