GHSA-pgx9-497m-6c4v
Critical · 9.1CVSS
9.1
EPSS
—
Published
Jan 21, 2026
CISA due date
—
The record
sm-crypto Affected by Private Key Recovery in SM2-PKE
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | sm-crypto | 0 | 0.3.14 |
Related vulnerabilities
- CVE-2026-23966 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms… Same vulnerability
- CVE-2026-23967 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms… Also affects sm-crypto
- CVE-2026-23965 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms… Also affects sm-crypto
- GHSA-hpwg-xg7m-3p6m sm-crypto Affected by Signature Forgery in SM2-DSA Also affects sm-crypto
- GHSA-qv7w-v773-3xqm sm-crypto Affected by Signature Malleability in SM2-DSA Also affects sm-crypto
- CVE-2026-102682 Pipecat is an open-source Python framework for building real-time voice and multimodal… CWE-345
- CVE-2026-104850 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and… CWE-345
- CVE-2026-102275 PyJWT is a Python implementation of JSON Web Token standards. CWE-345