Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Openpgp.js 加密问题漏洞
Vulnerability Description
Openpgp.js是一个使用JavaScript实现的开源OpenPGP加密算法库。 OpenPGP.js及之前版本中存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。
CVSS Information
N/A
Vulnerability Type
N/A