Daniel Moerner

**Name of the Vulnerable Software and Affected Versions** FireGPG versions prior to 0.6 **Description** The issue concerns the insecure handling of a user's passphrase and decrypted cleartext by FireGPG. Specifically, it writes pre-encrypted cleartext and the user's passphrase to disk, which may compromise secure communication or a user's private key. **Recommendations** For FireGPG versions prior to 0.6, update to version 0.6 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and avoiding the use of FireGPG for secure communication until the update is applied.