CVE-2023-41037

creationtimestamp| type| source ---|---|--- 2023-08-29 20:17:35+00:00| seen| https://t.me/cibsecurity/69360...

CVE-2023-41037

OpenPGP.js vulnerability (CVE-2023-41037) in Cleartext Signed Messages: versions up to 5.9.0 ignore data before the Hash: header, enabling text insertion that appears signed. Impact arises if an app verifies only verificationResult.verified and visually trusts the message; otherwise, verified dat...