CVE-2015-8013
1 advisory.
npm/openpgp CVE-2015-8013: high 7.5
OpenPGP 1.2.0 and earlier decrypts arbitrary messages
Action: Upgrade openpgp to 1.3.0 or later.
npm i openpgp@1.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0 | - |
Fixed versions
| 1.3.0 |
Sources
- osv: GHSA-qmvq-f3fj-m3wg
- https://nvd.nist.gov/vuln/detail/CVE-2015-8013
- https://github.com/openpgpjs/openpgpjs/commit/668a9bbe7033f3f475576209305eb57a54306d29
- https://github.com/openpgpjs/openpgpjs
- http://www.openwall.com/lists/oss-security/2015/10/30/5
CVE-2015-8013 · published · modified · JSON