Skip to content
JJuneAndGreen
Products
| Product | CVEs | Exploited | Latest |
|---|
| sm-crypto | 4 | – | Aug 13, 2026 |
Exploited and recent CVEs
-
CVE-2026-73567
Critical 9.1
sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
0.4%
-
CVE-2026-23966
Critical 9.1
sm-crypto Affected by Private Key Recovery in SM2-PKE
0.2%
-
CVE-2026-23965
High 7.5
sm-crypto Affected by Signature Forgery in SM2-DSA
0.2%
-
CVE-2026-23967
High 7.5
sm-crypto Affected by Signature Malleability in SM2-DSA
0.2%