Vulnerabilities > GPG PGP Project

DATE CVE VULNERABILITY TITLE RISK
2019-05-16 CVE-2019-8338 Improper Verification of Cryptographic Signature vulnerability in Gpg-Pgp Project Gpg-Pgp 1.0/1.0(9)
The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 (9) and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature.
4.3