Description
A maliciously modified message can be passed to either openpgp.verify or openpgp.decrypt, causing these functions to return a valid signature verification result while returning data that was not actually signed.
This flaw allows signature verifications of inline (non-detached) signed messages (using openpgp.verify) and signed-and-encrypted messages (using openpgp.decrypt with verificationKeys) to be spoofed, since both functions return extracted data that may not match the data that was originally signed.
Recommendation
Update the openpgp package to the latest compatible version. Followings are version details:
Affected version(s): **>= 6.0.0-alpha.0, <= 6.1.0 >= 5.0.1, <= 5.11.2** Patched version(s): **6.1.1 5.11.3**
References
Could your website be exposed too?
SmartScanner can check your website for OpenPGP.js's message signature verification can be spoofed and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Message Signature Bypass in openpgp - CVE-2019-9153
- Cleartext Signed Message Signature Spoofing in openpgp - CVE-2023-41037
- @clerk/backend Performs Insufficient Verification of Data Authenticity - CVE-2025-53548
- @clerk/backend Performs Insufficient Verification of Data Authenticity - @clerk/remix - CVE-2025-53548
