openpgp vulnerabilities (npm)

6 vulnerabilities.

• openpgp npm OpenPGP.js's message signature verification can be spoofed CVE-2025-47934 Fix available 8.7 HighMay 19, 2025
• openpgp npm Cleartext Signed Message Signature Spoofing in openpgpjs CVE-2023-41037 Fix available 4.3 MediumAugust 29, 2023
• openpgp npm Invalid Curve Attack in openpgp CVE-2019-9155 Fix available 5.9 MediumAugust 22, 2019
• openpgp npm Improper Key Verification in openpgp CVE-2019-9154 Fix available 7.5 HighAugust 22, 2019
• openpgp npm Message Signature Bypass in openpgp CVE-2019-9153 Public exploitFix available 7.5 HighAugust 22, 2019
• openpgp npm OpenPGP 1.2.0 and earlier decrypts arbitrary messages CVE-2015-8013 Fix available 7.5 HighJuly 25, 2017