CVE-2018-20954

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

CVE-2018-20954

Summary: CVE-2018-20954 affects Mailpile before 1.0.0rc4, where the Security and Privacy Encryption feature does not exclude disabled, revoked, and expired keys. This root cause can lead to weak or incorrect encryption and potential plaintext exposure, as noted by multiple sources. The issue is a...