A vulnerability in the implementation of hash signature field in GPG older versions. You can write any hash version and not-dash escaped + also use Carriage Return to overwrite data shown to user.