Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

openpgp

npm

OpenPGP.js is a Javascript implementation of the OpenPGP protocol. This is defined in RFC 4880.

View on github.com · View on npmjs.org

Security Advisories for openpgp in npm

High
5 months ago

OpenPGP.js's message signature verification can be spoofed GSA_kwCzR0hTQS04cWZmLXFyNXEtNXByOM4ABIHq

npm openpgp
Moderate
about 2 years ago

Cleartext Signed Message Signature Spoofing in openpgp GSA_kwCzR0hTQS1jaDNjLXY0N3gtNHBncM4AA1i9

npm openpgp
High
over 3 years ago

OpenPGP 1.2.0 and earlier decrypts arbitrary messages GSA_kwCzR0hTQS1xbXZxLWYzZmotbTN3Z84AAa3s

npm openpgp
Moderate
about 6 years ago

Invalid Curve Attack in openpgp MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc3amYtZmpqZi14Y3d3

npm openpgp
High
about 6 years ago

Message Signature Bypass in openpgp MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXF3cWMtMjh3My1md3c2

npm openpgp
High
about 6 years ago

Improper Key Verification in openpgp MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhmbWYtcTQzdi0yZmZq

npm openpgp

Filter by Severity

High 4 Moderate 2