Vulnerabilities > Openpgpjs

DATE CVE VULNERABILITY TITLE RISK
2023-08-29 CVE-2023-41037 Unspecified vulnerability in Openpgpjs
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol.
network
low complexity
openpgpjs
4.3
2019-08-22 CVE-2019-9155 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Openpgpjs
A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key.
network
high complexity
openpgpjs CWE-327
5.9
2019-08-22 CVE-2019-9154 Improper Verification of Cryptographic Signature vulnerability in Openpgpjs
Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed.
network
low complexity
openpgpjs CWE-347
7.5
2019-08-22 CVE-2019-9153 Improper Verification of Cryptographic Signature vulnerability in Openpgpjs
Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.
network
low complexity
openpgpjs CWE-347
7.5
2017-07-25 CVE-2015-8013 Cryptographic Issues vulnerability in Openpgpjs
s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.
network
low complexity
openpgpjs CWE-310
7.5