GHSA-qv7w-v773-3xqm
High · 7.5CVSS
7.5
EPSS
—
Published
Jan 21, 2026
CISA due date
—
The record
sm-crypto Affected by Signature Malleability in SM2-DSA
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | sm-crypto | 0 | 0.3.14 |
Related vulnerabilities
- CVE-2026-23967 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms… Same vulnerability
- CVE-2026-23966 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms… Also affects sm-crypto
- CVE-2026-23965 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms… Also affects sm-crypto
- GHSA-hpwg-xg7m-3p6m sm-crypto Affected by Signature Forgery in SM2-DSA Also affects sm-crypto
- GHSA-pgx9-497m-6c4v sm-crypto Affected by Private Key Recovery in SM2-PKE Also affects sm-crypto
- CVE-2026-87947 Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO… CWE-347
- CVE-2026-84918 Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment… CWE-347
- CVE-2026-102271 PyJWT is a Python implementation of JSON Web Token standards. CWE-347