HIGH7.5npm
GHSA-hpwg-xg7m-3p6m· CVE-2026-23965sm-crypto Affected by Signature Forgery in SM2-DSA
Modified: 2/3/2026
package
pkg:npm/sm-crypto
sm-crypto Affected by Signature Forgery in SM2-DSA
Modified: 2/3/2026
sm-crypto Affected by Private Key Recovery in SM2-PKE
Modified: 2/3/2026
sm-crypto Affected by Signature Malleability in SM2-DSA
Modified: 2/3/2026
sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
Modified: 8/13/2026