SigSpoof 2: More ways to spoof signatures in GnuPG (CVE-2018-12019) – NeoPG
neopg.io