https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T20:08:08.610718+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2019-25746 cnvd-2019-25746 2026-10-11T20:08:08.614261+00:00 cnvd-2019-25746 https://vulnerability.circl.lu/vuln/fkie_cve-2019-9148 fkie_cve-2019-9148 2026-10-11T20:08:08.614354+00:00

Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are not rejected during import. An attacker that is able to get a victim to import a manipulated key could claim to have signed a message that originates from another person.

 https://vulnerability.circl.lu/vuln/ghsa-7jh7-fp3w-72g5 GHSA-7jh7-fp3w-72g5 2026-10-11T20:08:08.614414+00:00

Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are not rejected during import. An attacker that is able to get a victim to import a manipulated key could claim to have signed a message that originates from another person.

 https://vulnerability.circl.lu/vuln/gsd-2019-9148 gsd-2019-9148 2026-10-11T20:08:08.614441+00:00 gsd-2019-9148