What’s Vulnerable › Products

openpgpjs vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your openpgpjs version is affected

Latest openpgpjs vulnerabilities

• CVE-2025-47934 — OpenPGP.js's message signature verification can be spoofed (CVSS 8.7)
• CVE-2023-41037 — Cleartext Signed Message Signature Spoofing in openpgpjs (CVSS 4.3)
• CVE-2019-9155 — (CVSS 5.9)
• CVE-2019-9154 — (CVSS 7.5)
• CVE-2019-9153 — (CVSS 7.5)
• CVE-2015-8013 — (CVSS 7.5)