Skip to content
OpenAdvisories

Package · npm

sm-crypto

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-23965

    sm-crypto Affected by Signature Forgery in SM2-DSA

    sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature forgery vulnerability exists in the SM2 signature verification logic of sm-crypto prior to version 0.4.0. Under default configurations, an att…

    JuneAndGreen sm-crypto sm-crypto npm
  • High 7.5
    CVE-2026-23967

    sm-crypto Affected by Signature Malleability in SM2-DSA

    sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can de…

    JuneAndGreen sm-crypto sm-crypto npm