Skip to content
OpenAdvisories

Package · npm

openpgp

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2019-9153 Public exploit

    Message Signature Bypass in openpgp

    Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.

    openpgp npm