Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Openpubkey records in CISA KEVNo Openpubkey vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 48
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0034 · Published 2025-05-13 · Fixed in 0.5.0 CWE-305
Priority MEDIUM 48
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00427 · Published 2025-05-13 · Fixed in 0.10.0 CWE-305
