OpenPGP Vulnerability CVE-2025-47934 Exposes Users - Cybernoz - Cybersecurity News

OpenPGP Vulnerability CVE-2025-47934 Exposes Users - Cybernoz - Cybersecurity News

A flaw has been discovered in OpenPGP.js, a widely used JavaScript library for OpenPGP encryption. Tracked as CVE-2025-47934, the vulnerability allows threat actors to spoof both signed and encrypted messages, effectively undermining the very foundation of trust in public key cryptography.  The vulnerability, rated 8.7 (High) on the CVSS scale, was discovered by security researchers Edoardo Geraci and Thomas Rinsma of Codean Labs. Their findings…

OpenPGP Vulnerability CVE-2025-47934 Exposes Users

A flaw has been discovered in OpenPGP.js, a widely used JavaScript library for OpenPGP encryption. Tracked as CVE-2025-47934, the vulnerability allows threat actors to spoof both signed and encrypted messages, effectively undermining the very foundation of trust in public key cryptography.  The vulnerability, rated 8.7 (High) on the CVSS scale, was discovered by security researchers Edoardo Geraci and Thomas Rinsma of Codean Labs. Their findings…

OpenPGP.js, a Javascript implementation of OpenPGP, can be fooled when checking message signatures. Patches fix the serious security vulnerability. A maliciously modified message can either be passed to openpgp.verify or openpgp.decrypt, which means that these functions return a valid signature check result, although the data was not actually signed, says in a security message to the vulnerability (