CVE-2026-73567Published
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex() path in Node.js uses the module-wide SecureRandom instance in src/sm2/…
Exact source revision recorded 25 Oct 2026 15:19:09 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-73567
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.