Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

openpgp

Ecosystem:
npm
Package URL:
pkg:npm/openpgp
Total PRs:
180 Dependabot PRs
Latest PR:
7 days ago
Unique Repositories:
108 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
OpenPGP.js's message signature verification can be spoofed
GHSA-8qff-qr5q-5pr8 CVE-2025-47934 HIGH published about 1 year ago • updated 23 days ago
### Impact A maliciously modified message can be passed to either `openpgp.verify` or `openpgp.decrypt`, causing these functions to return a valid ...
Message Signature Bypass in openpgp
GHSA-qwqc-28w3-fww6 CVE-2019-9153 HIGH published almost 7 years ago • updated 44 minutes ago
Versions of `openpgp` prior to 4.2.0 are vulnerable to Message Signature Bypass. The package fails to verify that a message signature is of type `t...
OpenPGP 1.2.0 and earlier decrypts arbitrary messages
GHSA-qmvq-f3fj-m3wg CVE-2015-8013 HIGH published about 4 years ago • updated 8 days ago
s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authenti...
Improper Key Verification in openpgp
GHSA-hfmf-q43v-2ffj CVE-2019-9154 HIGH published almost 7 years ago • updated 44 minutes ago
Versions of `openpgp` prior to 4.2.0 are vulnerable to Improper Key Verification. The OpenPGP standard allows signature packets to have subpackets ...
Cleartext Signed Message Signature Spoofing in openpgp
GHSA-ch3c-v47x-4pgp CVE-2023-41037 MODERATE published almost 3 years ago • updated about 8 hours ago
### Impact OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools: ``` --...
View all 6 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
build(deps): bump the minor-patches group across 1 directory with 17 updates

Ed-Fi-Alliance-OSS/Ed-Fi-AdminApp #210

6.3.0 → 6.3.1 Patch PR
Open 7 days ago 2 comments
Ed-Fi-Alliance-OSS
deps: bump the production-deps group across 1 directory with 26 updates

forwardemail/mail.forwardemail.net #86

6.3.0 → 6.3.1 Patch PR
Closed 9 days ago 2 comments
forwardemail
build(deps): bump the npm-deps group across 1 directory with 9 updates

4cm4k1/flowcrypt-browser #831

6.3.0 → 6.3.1 Patch PR
Closed 10 days ago 1 comment
4cm4k1
chore(deps): bump openpgp from 6.2.0 to 6.2.2

coder/vscode-coder #611

6.2.0 → 6.2.2 Patch PR
Open 8 months ago
coder
build(deps): bump openpgp from 6.2.1 to 6.2.2 in /website

TassiloPitrasch/yopass #394

6.2.1 → 6.2.2 Patch PR
Merged 10 months ago
TassiloPitrasch
build(deps): bump openpgp from 6.2.1 to 6.2.2 in /website

jhaals/yopass #2977

6.2.1 → 6.2.2 Patch PR
Open 10 months ago
jhaals
build(deps-dev): bump openpgp from 6.2.0 to 6.2.2 in the npm-deps group across 1 directory

4cm4k1/flowcrypt-browser #682

6.2.0 → 6.2.2 Patch PR
Open 10 months ago
4cm4k1
build(deps): bump openpgp from 6.2.0 to 6.2.1

chadsr/ross.ch #523

6.2.0 → 6.2.1 Patch PR
Open 10 months ago
chadsr
build(deps): bump the npm-deps group across 1 directory with 5 updates

4cm4k1/flowcrypt-browser #680

6.2.0 → 6.2.1 Patch PR
Open 10 months ago
4cm4k1
build(deps): bump the npm-deps group with 5 updates

FlowCrypt/flowcrypt-browser #6070

6.2.0 → 6.2.1 Patch PR
Merged 10 months ago
FlowCrypt
build(deps): bump the npm-deps group across 1 directory with 4 updates

4cm4k1/flowcrypt-browser #678

6.2.0 → 6.2.1 Patch PR
Closed 10 months ago 1 comment
4cm4k1
build(deps): bump the npm-deps group across 1 directory with 6 updates

4cm4k1/flowcrypt-browser #676

6.2.0 → 6.2.1 Patch PR
Closed 10 months ago 1 comment
4cm4k1
fix(deps): bump openpgp from 5.11.2 to 5.11.3

internxt/cli #288

5.11.2 → 5.11.3 Patch PR
Open 12 months ago
internxt
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

anoncam/dedpaste #68

6.1.0 → 6.1.1 Patch PR
Merged about 1 year ago
anoncam
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

vagabond2522/super-linter #1

6.1.0 → 6.1.1 Patch PR
Closed about 1 year ago 1 comment
vagabond2522
build(deps): bump openpgp from 6.1.0 to 6.1.1 in /website in the npm_and_yarn group

TassiloPitrasch/yopass #242

6.1.0 → 6.1.1 Patch PR
Merged about 1 year ago
TassiloPitrasch
build(deps-dev): bump openpgp from 5.11.2 to 5.11.3 in /appium

FlowCrypt/flowcrypt-ios #2666

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
FlowCrypt
chore(deps): bump openpgp and renovate

ganta/renovate-config #535

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago
ganta
Bump openpgp from 6.1.0 to 6.1.1 in the npm_and_yarn group

Sky-Genesis-Enterprise/aether-mail #65

6.1.0 → 6.1.1 Patch PR
Merged about 1 year ago
Sky-Genesis-Enterprise
Bump openpgp from 6.1.0 to 6.1.1

Core447/blockchain-demo #2

6.1.0 → 6.1.1 Patch PR
Merged about 1 year ago
Core447
Bump openpgp and renovate

ianlewis/qmk-keymap #48

6.1.0 → 6.1.1 Patch PR
Closed about 1 year ago
ianlewis
chore(deps): Bump openpgp from 6.1.0 to 6.1.1 in the npm_and_yarn group

elide-dev/jpms #390

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago 1 comment
elide-dev
Bump openpgp from 5.11.2 to 5.11.3

apiiro-snyk/passbolt_api #2

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
apiiro-snyk
build(deps): bump openpgp from 5.11.2 to 5.11.3

zone-eu/wildduck #815

5.11.2 → 5.11.3 Patch PR
Closed about 1 year ago 4 comments
zone-eu
chore(deps): bump openpgp from 5.11.2 to 5.11.3

AKASHAorg/akasha-core #2646

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
AKASHAorg
Bump openpgp from 5.11.2 to 5.11.3

SimonPrinz/pgpql #8

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
SimonPrinz
Bump openpgp from 6.1.0 to 6.1.1 in the npm_and_yarn group across 1 directory

baoduy/drunk-pulumi-azure #152

6.1.0 → 6.1.1 Patch PR
Merged about 1 year ago
baoduy
Bump openpgp from 5.11.2 to 5.11.3 in /dev/flux

prosopo/captcha #1855

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago 1 comment
prosopo
chore(deps): bump openpgp from 5.11.2 to 5.11.3

internxt/drive-server-wip #555

5.11.2 → 5.11.3 Patch PR
Merged about 1 year ago 3 comments
internxt
Bump openpgp from 5.11.2 to 5.11.3

Cyb3r-Jak3/workers-letterbox #18

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
Cyb3r-Jak3
chore(deps): bump openpgp from 6.1.0 to 6.1.1

WonderInventions/renovate #4

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago
WonderInventions
Bump openpgp from 5.11.2 to 5.11.3

TropixInc/new-connect-public #7

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
TropixInc
Bump openpgp from 5.11.2 to 5.11.3

TheLonelyGhost/vault-workflow #1

5.11.2 → 5.11.3 Patch PR
Merged about 1 year ago
TheLonelyGhost
Bump openpgp from 5.11.1 to 5.11.3

nodemailer/nodemailer-openpgp #11

5.11.1 → 5.11.3 Patch PR
Open about 1 year ago
nodemailer
Build(deps): Bump openpgp from 6.1.0 to 6.1.1 in the npm_and_yarn group

abtion/abtion-secret #2294

6.1.0 → 6.1.1 Patch PR
Merged about 1 year ago
abtion
Bump openpgp from 6.1.0 to 6.1.1

zunda/mitome.in #186

6.1.0 → 6.1.1 Patch PR
Closed about 1 year ago 1 comment
zunda
Build(deps-dev): Bump the npm_and_yarn group across 1 directory with 2 updates

pcistudio/doc-site-ui #67

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago
pcistudio
chore(deps): bump openpgp from 5.11.2 to 5.11.3

bentoti/xen-orchestra #11

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
bentoti
chore(deps): bump openpgp from 5.11.2 to 5.11.3 in the npm_and_yarn group

hashicorp/terraform-cdk-action #287

5.11.2 → 5.11.3 Patch PR
Merged about 1 year ago
hashicorp
build(deps): bump openpgp from 5.11.2 to 5.11.3

hashicorp/js-releases #384

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
hashicorp
chore(deps): bump openpgp from 5.11.1 to 5.11.3

decentraland/governance-ui #184

5.11.1 → 5.11.3 Patch PR
Open about 1 year ago
decentraland
build(deps): bump openpgp from 5.11.2 to 5.11.3

TheClashFruit/e2e-protocol #1

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
TheClashFruit
Bump openpgp from 6.1.0 to 6.1.1

Cyb3r-Jak3/workers-serverless-api #309

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago 4 comments
Cyb3r-Jak3
chore(deps): bump openpgp from 6.1.0 to 6.1.1 in the npm_and_yarn group across 1 directory

JounQin/renovate #3

6.1.0 → 6.1.1 Patch PR
Closed about 1 year ago 4 comments
JounQin
Bump openpgp from 6.1.0 to 6.1.1

balboacodes/balance #9

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago
balboacodes
build(deps): bump openpgp from 6.1.0 to 6.1.1 in /Core

FlowCrypt/flowcrypt-ios #2663

6.1.0 → 6.1.1 Patch PR
Merged about 1 year ago
FlowCrypt
build(deps): bump openpgp from 6.1.0 to 6.1.1

crazy-max/ghaction-import-gpg #219

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago
crazy-max
chore(deps): bump openpgp from 6.1.0 to 6.1.1

AKJUS/renovate #192

6.1.0 → 6.1.1 Patch PR
Open about 1 year ago 1 comment
AKJUS
Bump openpgp from 5.11.2 to 5.11.3

scidsg/hushline #1044

5.11.2 → 5.11.3 Patch PR
Merged about 1 year ago
scidsg
Bump openpgp from 5.11.2 to 5.11.3

qntoni/nodejs-cli-for-passbolt #8

5.11.2 → 5.11.3 Patch PR
Open about 1 year ago
qntoni
Package Details
Name: openpgp
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/openpgp
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 4
MODERATE 2
View All npm Advisories
Package Information
Description:

OpenPGP.js is a Javascript implementation of the OpenPGP protocol. This is defined in RFC 4880.

Repository: https://github.com/openpgpjs/openpgpjs
Homepage: https://openpgpjs.org/
Latest Release: 6.1.1
about 1 year ago
Dependent Repos: 1,283
Dependent Packages: 289
Downloads: 2,260,225
Ranking: Top 0.5489% by dependent repos Top 0.2466% by downloads Top 0.1788% by dependent pkgs
PR Status
Open 79 (43.9%)
Merged 29 (16.1%)
Closed 48 (26.7%)
PR Types
Major 38 (21.1%)
Minor 50 (27.8%)
Patch 68 (37.8%)