Security researchers at Codean Labs, a leading cybersecurity firm, have discovered a severe security vulnerability in OpenPGP.js, a widely-used open-source encryption library. This vulnerability enables the forgery of signatures and encryption messages, thereby severely compromising the integrity of email public key encryption technology. In response, ProtonMail, a key user and maintainer of the encryption library, has promptly released updated versions to mitigate the issue. The affected versions range from OpenPGP.js 5.0.1 to 5.11.2 and 6.0.0-alpha to 6.1.0. Users are strongly recommended to upgrade to versions 5.11.3 and 6.1.1 to ensure the security of their communications.
