1694 matches found
CVE-2024-58261
The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key type...
ROS-20250717-04
A vulnerability in the Thunderbird email client is related to errors in processing OpenPGP cryptographic signatures. Exploitation of the vulnerability could allow a remote attacker to launch a spoofing attack Vulnerability in the implementation of S/MIME Secure/Multipurpose Internet Mail Extensio...
CVE-2023-41037
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools. These messages typically contain a "Hash: ..." header declaring the hash algorit...
CVE-2015-3298
Yubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used. When first powered up, a signature will be issued even though the PIN has not been validated...
CVE-2025-47934
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either openpgp.verify or openpgp.decrypt, causing these functions to return a valid signature verification result...
@jamietanna/patch-testing (>=0.1.0, <=0.2.28), @jamietanna/renovate-graph (>=0.24.0, <=0.30.0) +5 more potentially affected by CVE-2025-47934 via openpgp (>=6.0.0, <=6.1.0)
openpgp NPM version =6.0.0, =0.1.0, =0.24.0, =0.5.2, =7.2.5, =0.40.0, =2.0.0, =39.15.1, =41.0.0-next.22 Source cves: CVE-2025-47934 Source advisory: OSV:GHSA-8QFF-QR5Q-5PR8...
@adebaraayomide/synchro_sdk (>=0.0.3, <=0.1.0-synchro-sdk), @aloe2/abstract-eth (1.0.20228282226) +271 more potentially affected by CVE-2025-47934 via openpgp (>=5.0.1, <=5.11.2)
openpgp NPM version =5.0.1, =0.0.3, =0.1.0-synchro-sdk - @aloe2/abstract-eth 1.0.20228282226 - @aloe2/abstract-utxo 1.1.20228282226 - @aloe2/account-lib 2.20.20228282226 - @aloe2/bitgo 14.2.20228282226 - @aloe2/sdk-api 1.1.20228282226 - @aloe2/sdk-coin-ada 1.1.20228282226 - @aloe2/sdk-coin-algo...
CVE-2025-47934
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either openpgp.verify or openpgp.decrypt, causing these functions to return a valid signature verification result...
CVE-2025-47934 OpenPGP.js's message signature verification can be spoofed
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either openpgp.verify or openpgp.decrypt, causing these functions to return a valid signature verification result...
CVE-2025-47934 OpenPGP.js's message signature verification can be spoofed
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either openpgp.verify or openpgp.decrypt, causing these functions to return a valid signature verification result...
CVE-2025-47934 OpenPGP.js's message signature verification can be spoofed
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either openpgp.verify or openpgp.decrypt, causing these functions to return a valid signature verification result...
@jamietanna/patch-testing (>=0.1.0, <=0.2.28), @jamietanna/renovate-graph (>=0.24.0, <=0.30.0) +5 more potentially affected by CVE-2025-47934 via openpgp (>=6.0.0, <=6.1.0)
openpgp NPM version =6.0.0, =0.1.0, =0.24.0, =0.5.2, =7.2.5, =0.40.0, =2.0.0, =39.15.1, =41.0.0-next.22 Source cves: CVE-2025-47934 Source advisory: MEND:CVE-2025-47934...
CVE-2025-47934
OpenPGP.js CVE-2025-47934 affects versions prior to 5.11.3 and 6.1.1, where a maliciously modified message can cause openpgp.verify or openpgp.decrypt to return a valid signature verification while the data may not have been signed. This affects inline-signed messages and signed-and-encrypted mes...
OESA-2025-1523 gnupg2 security update
GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 also known as PGP. GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fixes: In GnuP...
[SECURITY] Fedora 41 Update: rust-sequoia-openpgp-2.0.0-2.fc41
OpenPGP data types and associated machinery...
[SECURITY] Fedora 41 Update: rust-sequoia-openpgp1-1.22.0-2.fc41
OpenPGP data types and associated machinery...
[SECURITY] Fedora 40 Update: rust-sequoia-openpgp-2.0.0-2.fc40
OpenPGP data types and associated machinery...
[SECURITY] Fedora 40 Update: rust-sequoia-openpgp1-1.22.0-2.fc40
OpenPGP data types and associated machinery...