Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-47934] Critical signature-spoofing vulnerability in OpenPGP.js hits the headlines

Summary

CVE-2025-47934: Codean Labs researchers found a critical OpenPGP.js signature-spoofing flaw via YesWeHack's Bug Bounty program (€7,500 bounty), covering discovery, remediation and disclosure.
Published
Collected

original ↗

Related coverage

back