All products

sm-crypto

npm · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clockCVE-2026-73567 · GHSA-VH45-F885-3848 sm-crypto npm Critical Fix reported
sm-crypto Affected by Signature Forgery in SM2-DSACVE-2026-23965 · GHSA-HPWG-XG7M-3P6M sm-crypto npm High Fix reported
sm-crypto Affected by Signature Malleability in SM2-DSACVE-2026-23967 · GHSA-QV7W-V773-3XQM sm-crypto npm High Fix reported
sm-crypto Affected by Private Key Recovery in SM2-PKECVE-2026-23966 · GHSA-PGX9-497M-6C4V sm-crypto npm Critical Fix reported