Skip to content
OpenAdvisories

Vendor

openpgpjs

2 known vulnerabilities.

Products

openpgpjs 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-47934

    OpenPGP.js's message signature verification can be spoofed

    OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either `openpgp.verify` or `openpgp.decrypt`, causing these functions to retur…

    openpgpjs openpgpjs openpgp npm