Filtered by vendor Gpgme Project Subscriptions
Filtered by product Gpgme Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-8945 3 Fedoraproject, Gpgme Project, Redhat 12 Fedora, Gpgme, Enterprise Linux and 9 more 2024-11-21 7.5 High
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.