| Package | Affected versions | Patched versions |
|---|---|---|
| golang.org/x/crypto | all versions |
The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.
If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free