[rwth-security] OpenPGP.js Flaw Allows Signature Spoofing, Breaking Message Trust – PoC Available