It is worth noting that this isn't a flaw in OpenPGP or GPG or anything like that. It's only Proton Mail's javascript implementation that's buggy. It's not a flaw in the algorithm. The math still works. But signing things in Proton Mail (and whoever is is using their code) broke.