Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:38:48 +0000 EUVD-2026-266327 https://cve.radiocsirt.org/vuln/euvd-2026-266327 EUVD-2026-266327 https://cve.radiocsirt.org/vuln/euvd-2026-266327 fkie_cve-2026-23966 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23966 <p>sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions. Version 0.3.14 patches the issue.</p> <p>sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions. Version 0.3.14 patches the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23966 GHSA-pgx9-497m-6c4v — sm-crypto Affected by Private Key Recovery in SM2-PKE https://cve.radiocsirt.org/vuln/ghsa-pgx9-497m-6c4v <p><strong>Affected:</strong> npm: sm-crypto</p> <p>### Summary</p> <p>A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions.</p> <p>### Credit</p> <p>This vulnerability was discovered by: - XlabAI Team of Tencent Xuanwu Lab - Atuin Automated Vulnerability Discovery Engine</p> <p><strong>Affected:</strong> npm: sm-crypto</p> <p>### Summary</p> <p>A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions.</p> <p>### Credit</p> <p>This vulnerability was discovered by: - XlabAI Team of Tencent Xuanwu Lab - Atuin Automated Vulnerability Discovery Engine</p> https://cve.radiocsirt.org/vuln/ghsa-pgx9-497m-6c4v