HIGH7.5npm
GHSA-hpwg-xg7m-3p6m· CVE-2026-23965sm-crypto Affected by Signature Forgery in SM2-DSA
Modified: 2/3/2026
package
npm/sm-crypto
pkg:npm/sm-crypto
CRITICAL9.1npm
GHSA-pgx9-497m-6c4v· CVE-2026-23966sm-crypto Affected by Private Key Recovery in SM2-PKE
Modified: 2/3/2026
HIGH7.5npm
GHSA-qv7w-v773-3xqm· CVE-2026-23967sm-crypto Affected by Signature Malleability in SM2-DSA
Modified: 2/3/2026
CRITICAL9.1npm
GHSA-vh45-f885-3848· CVE-2026-73567sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
Modified: 8/13/2026