Skip to content
OpenAdvisories

Package · npm

openpgp

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-41037

    Cleartext Signed Message Signature Spoofing in openpgpjs

    OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools. These messages typically contain a "Hash: …

    openpgpjs openpgpjs openpgp npm
  • Medium 5.9
    CVE-2019-9155

    Invalid Curve Attack in openpgp

    A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key.

    openpgp npm