Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:49:19 +0000 EUVD-2026-266335 https://cve.radiocsirt.org/vuln/euvd-2026-266335 EUVD-2026-266335 https://cve.radiocsirt.org/vuln/euvd-2026-266335 fkie_cve-2026-23967 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23967 <p>sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can derive a new valid signature for a previously signed message from an existing signature. Version 0.3.14 patches the issue.</p> <p>sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can derive a new valid signature for a previously signed message from an existing signature. Version 0.3.14 patches the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23967 GHSA-qv7w-v773-3xqm — sm-crypto Affected by Signature Malleability in SM2-DSA https://cve.radiocsirt.org/vuln/ghsa-qv7w-v773-3xqm <p><strong>Affected:</strong> npm: sm-crypto</p> <p>### Summary</p> <p>A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library. An attacker can derive a new valid signature for a previously signed message from an existing signature.</p> <p>### Credit</p> <p>This vulnerability was discovered by: - XlabAI Team of Tencent Xuanwu Lab - Atuin Automated Vulnerability Discovery Engine</p> <p><strong>Affected:</strong> npm: sm-crypto</p> <p>### Summary</p> <p>A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library. An attacker can derive a new valid signature for a previously signed message from an existing signature.</p> <p>### Credit</p> <p>This vulnerability was discovered by: - XlabAI Team of Tencent Xuanwu Lab - Atuin Automated Vulnerability Discovery Engine</p> https://cve.radiocsirt.org/vuln/ghsa-qv7w-v773-3xqm