Security Advisory
CVE-2019-9154
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed.