Signing-party Project Signing-party — known CVE vulnerabilities

Every CVE whose affected-product data names Signing-party Project Signing-party, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2019-11627 — CVSS 9.8 (critical): gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID.