Vulnerabilities > Signing Party Project > Signing Party > 1.1.6.1

DATE CVE VULNERABILITY TITLE RISK
2019-04-30 CVE-2019-11627 OS Command Injection vulnerability in multiple products
gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID.
network
low complexity
signing-party-project debian opensuse CWE-78
critical
10.0