Security advisory

Action required: update Norvane Forge on macOS

Hello,

Please update Norvane Forge for macOS before June 12, 2026 to avoid disruption of access. Any Forge app or CLI that has not been updated by then will be blocked until it is updated.

As a precautionary security measure, the Norvane security team has rotated the code signing certificate for Norvane Forge on macOS. Builds signed with the old certificate will stop being trusted on June 12. The blog post has the full details.

We found no evidence that user data was accessed, that our systems were compromised, or that our software was altered. This rotation was done out of an abundance of caution. Norvane Forge on Windows and Linux, the Forge browser extension, and the Forge CLI on Windows and Linux are not affected.

Affected versions

How to update before June 12

1. Forge app. Open the Norvane Forge menu and choose Check for Updates, or download the latest build.

   Download Norvane Forge 3.8.0

2. Forge CLI. Run this in a terminal:
   npm install -g @norvane/forge-cli@latest
   The CLI update guide covers other install methods.
3. Confirm the version. About Norvane Forge in the app menu should show 3.8.0 or later, and forge --version should print 1.19.0 or later.

You do not need to reset your Norvane password or rotate your Norvane API keys.

If you have any questions, contact security-response@norvane.ai.

The Norvane Security Team