GPG Vulnerabilities Remain Unpatched After Disclosure

A security researcher disclosed multiple vulnerabilities in GnuPG, the most used PGP implementation, in 2025. While some flaws, like memory corruption in the message parser, were fixed, others remain unpatched. The main developer, Werner Koch, declared a widely-used feature 'harmful' instead of fixing it. The researcher plans to demonstrate the ongoing issues and present new vulnerabilities in a talk.