GHSA-vh45-f885-3848Published
sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-73567 · Microsoft / collected KEV context
cve-program · CVE-2026-73567
- https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848
- https://github.com/JuneAndGreen/sm-crypto/commit/1f9bd7bd160c24efd9c26c8f7fda997c68c823d0
nvd · CVE-2026-73567
- https://github.com/JuneAndGreen/sm-crypto/commit/1f9bd7bd160c24efd9c26c8f7fda997c68c823d0
- https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848
osv · GHSA-vh45-f885-3848
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.