sm-crypto Affected by Private Key Recovery in SM2-PKE
Priority MEDIUM 47CWE-345Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-345.
Summary
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions. Version 0.3.14 patches the issue.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00232 14th percentileScored 2026-11-07
Fix Fixed sm-crypto (JuneAndGreen): 0.3.14sm-crypto (npm): 0.3.14
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| JuneAndGreen | sm-crypto | before 0.3.14 | 0.3.14 | Patch available | CNA |
| — | sm-crypto (npm) | before 0.3.14 | 0.3.14 | Patch available | GHSA-pgx9-497m-6c4v |
- sm-crypto VendorJuneAndGreen Affected before 0.3.14 Fixed in 0.3.14 Patch available CNA
- sm-crypto (npm) Vendor— Affected before 0.3.14 Fixed in 0.3.14 Patch available GHSA-pgx9-497m-6c4v
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:juneandgreen:sm-crypto:*:*:*:*:*:*:*:* | before 0.3.14 | Vulnerable | JuneAndGreen |
- cpe:2.3:a:juneandgreen:sm-crypto:*:*:*:*:*:*:*:* Versions before 0.3.14 Vulnerable ·JuneAndGreen
Remediation
- Fix · CNA sm-crypto (JuneAndGreen) Fixed in 0.3.14
- Fix · GHSA-pgx9-497m-6c4v sm-crypto (npm) Fixed in 0.3.14 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-23966
- 2026-10-03 Alias added: GHSA-pgx9-497m-6c4v
References
More JuneAndGreen Sm-crypto vulnerabilities
- TI-2026-19309 sm-crypto Affected by Signature Malleability in SM2-DSA CVSS 3.1HIGH 7.5
- TI-2026-19307 sm-crypto Affected by Signature Forgery in SM2-DSA CVSS 3.1HIGH 7.5
Sources
- CVE-2026-23966 · CVE Program
- CVE-2026-23966 · NVD
- FIRST EPSS
- GHSA-pgx9-497m-6c4v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences