CVE-2026-73567

Name of the Vulnerable Software and Affected Versions sm-crypto versions prior to 0.5.0

Description The software provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. In Node.js, the default no-argument sm2.generateKeyPairHex() path uses a SecureRandom instance in src/sm2/utils.js provided by jsbn@1.1.0. This instance seeds an ARC4 stream using Math.random() and new Date().getTime() because window.crypto.getRandomValues is unavailable. An attacker capable of observing Math.random() outputs and estimating the key-generation time can reconstruct the seed, recover generated SM2 private keys, and predict signing ephemeral scalars to forge signatures.

Recommendations Update to version 0.5.0.