sm-crypto Affected by Private Key Recovery in SM2-PKE

CRITICAL 9.1CVE-2026-23966 · GHSA-pgx9-497m-6c4v · Published 22/01/2026 · updated 17/06/2026

Package	Affected versions	Patched versions
sm-crypto juneandgreen	`< 0.3.14`	`0.3.14`
sm-crypto npm	`< 0.3.14`	`0.3.14`

Description

Summary

A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions.

Credit

This vulnerability was discovered by:

XlabAI Team of Tencent Xuanwu Lab
Atuin Automated Vulnerability Discovery Engine

NVD description

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions. Version 0.3.14 patches the issue.

References

JuneAndGreen/sm-crypto security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-23966 · ADVISORY
JuneAndGreen/sm-crypto commit b1c824e · WEB
JuneAndGreen/sm-crypto · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free