OsVault/npm/openpgp
npm

openpgp

6 known vulnerabilities · 0 critical · 3 high

CVE-2019-9154HIGH

Improper Key Verification in openpgp

Published Aug 23, 2019
CVE-2023-41037MEDIUM

Cleartext Signed Message Signature Spoofing in openpgp

Published Aug 29, 2023
CVE-2019-9153HIGH

Message Signature Bypass in openpgp

Published Aug 23, 2019
CVE-2015-8013HIGH

OpenPGP 1.2.0 and earlier decrypts arbitrary messages

Published May 17, 2022
CVE-2025-47934

OpenPGP.js's message signature verification can be spoofed

Published May 19, 2025
CVE-2019-9155MEDIUM

Invalid Curve Attack in openpgp

Published Aug 23, 2019
Check your entire dependency tree at onceRun dependency scan →