Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: JuneAndGreen Component: Sm-crypto Clear all filters
TI-2026-19308 CVE-2026-23966 · GHSA-pgx9-497m-6c4v

sm-crypto Affected by Private Key Recovery in SM2-PKE

Priority MEDIUM 47

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00232 Published 2026-01-22 Fixed in 0.3.14 CWE-345
TI-2026-19307 CVE-2026-23965 · GHSA-hpwg-xg7m-3p6m

sm-crypto Affected by Signature Forgery in SM2-DSA

Priority LOW 38

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00215 Published 2026-01-22 Fixed in 0.4.0 CWE-347
TI-2026-19309 CVE-2026-23967 · GHSA-qv7w-v773-3xqm

sm-crypto Affected by Signature Malleability in SM2-DSA

Priority LOW 38

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00211 Published 2026-01-22 Fixed in 0.3.14 CWE-347