s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openpgpjs | Openpgpjs | * | 1.2.0 (including) |