Critical Security Flaw Uncovered in OpenPGP.js, Undermining Email Public Key Encryption
2025-05-21 / Read about 0 minute
Author:小编   

Security researchers at Codean Labs, a leading cybersecurity firm, have discovered a severe security vulnerability in OpenPGP.js, a widely-used open-source encryption library. This vulnerability enables the forgery of signatures and encryption messages, thereby severely compromising the integrity of email public key encryption technology. In response, ProtonMail, a key user and maintainer of the encryption library, has promptly released updated versions to mitigate the issue. The affected versions range from OpenPGP.js 5.0.1 to 5.11.2 and 6.0.0-alpha to 6.1.0. Users are strongly recommended to upgrade to versions 5.11.3 and 6.1.1 to ensure the security of their communications.