Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (2)
| Vulnerability |
Summary |
Aliases |
|
VCID-1bk8-d5bu-1uh9
|
sm-crypto Affected by Signature Malleability in SM2-DSA
A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library. An attacker can derive a new valid signature for a previously signed message from an existing signature.
|
CVE-2026-23967
GHSA-qv7w-v773-3xqm
|
|
VCID-ycz9-vn64-b7fj
|
sm-crypto Affected by Private Key Recovery in SM2-PKE
A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions.
|
CVE-2026-23966
GHSA-pgx9-497m-6c4v
|