There is a way to verify fake messages as if they were legitimate The bug affects multiple versions of OpenPGP.js A patch is ...