← Back to CVE List
CVE-2019-9153
Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt