There is a way to verify fake messages as if they were legitimate The bug affects multiple versions of OpenPGP.js A patch is available A security flaw in the JavaScript implementation of OpenPGP.js ...