---
id: 4756
title: "[CVE-2025-47934] Critical signature-spoofing vulnerability in OpenPGP.js hits the headlines"
cve: CVE-2025-47934
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/critical-signature-spoofing-vulnerability-openpgpjs"
published_at: "2025-06-11 11:34"
tags: ["bug-bounty", "cryptography", "vulnerability", "openpgpjs", "cve-2025-47934", "signature-spoofing"]
phying_url: "https://phying.com/item/4756"
lang: en
---

# [CVE-2025-47934] Critical signature-spoofing vulnerability in OpenPGP.js hits the headlines

## Summary

CVE-2025-47934: Codean Labs researchers found a critical OpenPGP.js signature-spoofing flaw via YesWeHack's Bug Bounty program (€7,500 bounty), covering discovery, remediation and disclosure.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **CVE:** CVE-2025-47934
- **Published:** 2025-06-11 11:34
- **Original:** https://www.yeswehack.com/news/critical-signature-spoofing-vulnerability-openpgpjs
- **Phying News:** https://phying.com/item/4756