CVE-2025-47934 - Spoofing OpenPGP.js signature verification