Login Request a demo
GN
Product
GnuPG
by GnuPG · last CVE Oct 27, 2026
38
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities38In the news0Timeline
Severity mix
Critical 2High 9Medium 10Low 3
Severity
All severities38Critical2High9Medium10Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GnuPG to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105712
3.6
0%
Oct 5
gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive
Affected: before 2.5.19
CVE-2022-3219
3.3
0%
Feb 23
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB
Affected: All versions, or not specified
CVE-2026-57062
2.9
0%
Jun 23
CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is…
Affected: through 2.5.20
Showing 3