Launchpad.net

CVE 2019-9154

Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed.

See the CVE page on Mitre.org for more details.