openpgp vulnerabilities

OpenPGP.js is a Javascript implementation of the OpenPGP protocol. This is defined in RFC 4880.

6.2.2

11 years ago

10 days ago

Known vulnerabilities in the openpgp package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Improper Verification of Cryptographic Signature	>=5.0.1 <5.11.3>=6.0.0-alpha.0 <6.1.1
M Improper Verification of Cryptographic Signature	<4.10.11>=5.0.0 <5.10.1
H Authentication Bypass	<1.3.0
M Cryptographic Issues	<0.10.0
H Invalid Curve Attack	<4.2.1
M Message Signature Bypass	<4.2.0
M Improper Authentication	<4.2.0

186 VERSIONS IN TOTAL See all versions