| Package | Affected versions | Patched versions |
|---|---|---|
| signing-party | ≥ 1.1, < 2.10 | 2.10 |
gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free