gnupg

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-3219gnupg2GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressLOW 3.30.3 %