Description
The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
Unscored
CVE-2018-20954
EUVD-2018-13492GHSA-rfvw-9494-24h7
The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
Published Aug 8, 2019 · Updated Aug 5, 2024 · Assigned by mitre