CVE-2019-9153: Improper Verification of Cryptographic Signature

Improper Verification of a Cryptographic Signature in OpenPGP.js =4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature...

PT-2019-19397

Name of the Vulnerable Software and Affected Versions openpgp versions prior to 4.2.0 Description The issue allows an attacker to forge signed messages by replacing their signatures with a "standalone" or "timestamp" signature. This is due to the improper verification of a cryptographic signature...