Product

pear/crypt_gpg vulnerabilities

1 published CVE affecting pear/crypt_gpg, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest pear/crypt_gpg CVEs

Newest publication first

CVE-2022-24953 Crypt_GPG does not prevent additional options in GPG calls
Published 2022-02-17

MediumCVSS 5.3 EPSS 0.85%

The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

pear/crypt_gpg vulnerabilities

Latest pear/crypt_gpg CVEs

CVE-2022-24953 Crypt_GPG does not prevent additional options in GPG calls