CyberSecBulletin

Openpgpjs vulnerabilities

We track 1 vulnerability in Openpgpjs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2025.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest Openpgpjs vulnerabilities

  • 8.7 High severity

    openpgpjs: Improper Verification of Cryptographic Signature

    CVE-2025-47934Openpgpjs

    OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either `openpgp.verify` or `openpgp.decrypt`, causing these functions to return