What’s Vulnerable › Products

JuneAndGreen sm-crypto vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your JuneAndGreen sm-crypto version is affected

Latest JuneAndGreen sm-crypto vulnerabilities

• CVE-2026-73567 — sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock (CVSS 9.1)
• CVE-2026-23967 — sm-crypto Affected by Signature Malleability in SM2-DSA (CVSS 7.5)
• CVE-2026-23966 — sm-crypto Affected by Private Key Recovery in SM2-PKE (CVSS 9.1)
• CVE-2026-23965 — sm-crypto Affected by Signature Forgery in SM2-DSA (CVSS 7.5)