opgp-service-cve-2019-9153

CVE-2019-9153 vulnerability reproduce PoC based on setup from BSI investigate vulnerability of opgp-service API to such an attack run tests with: npm test conclusion: opgp-service is by default setup with AEADprotect=true which protects against the signature bypass attack described in...

CVE-2019-9153

CVE-2019-9153 affects OpenPGP.js: improper verification of cryptographic signatures in OpenPGP.js up to version 4.1.2 allows forging signed messages by substituting a standalone or timestamp signature. The issue is documented across multiple sources (NVD entry for CVE-2019-9153 and related adviso...

CVE-2019-9153

Improper Verification of a Cryptographic Signature in OpenPGP.js =4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature...