https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:09:24.363372+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-23967 CVE-2026-23967 — sm-crypto Affected by Signature Malleability in SM2-DSA 2026-10-07T22:09:24.379101+00:00

Affected: JuneAndGreen sm-crypto

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can derive a new valid signature for a previously signed message from an existing signature. Version 0.3.14 patches the issue.