Openpgpjs@* Security Vulnerabilities and Issues — Openpgpjs@* CVE List

Lucene search

OpenpgpjsOpenpgpjs*

6 matches found

cve•added 2025/05/19 7:15 p.m.•167 views

CVE-2025-47934

OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either openpgp.verify or openpgp.decrypt, causing these functions to return a valid signature verification result whil...

8.7CVSS6.2AI score0.00016EPSS

cve•added 2019/08/22 4:15 p.m.•43 views

CVE-2019-9153

Improper Verification of a Cryptographic Signature in OpenPGP.js

7.5CVSS7.3AI score0.00362EPSS

cve•added 2023/08/29 5:15 p.m.•43 views

CVE-2023-41037

OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools. These messages typically contain a "Hash: ..." header declaring the hash algorithm...

4.3CVSS4.5AI score0.00076EPSS

cve•added 2019/08/22 4:15 p.m.•41 views

CVE-2019-9155

A cryptographic issue in OpenPGP.js

5.9CVSS5.7AI score0.00285EPSS

cve•added 2019/08/22 4:15 p.m.•39 views

CVE-2019-9154

Improper Verification of a Cryptographic Signature in OpenPGP.js

7.5CVSS7.3AI score0.00389EPSS

cve•added 2017/07/25 6:29 p.m.•34 views

CVE-2015-8013

s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.

7.5CVSS7.6AI score0.01077EPSS