VULNRABLE / Vulnerability / GHSA-vh45-f885-3848
GHSA-vh45-f885-3848
CRITICAL WATCH sm-crypto GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
What this means
GHSA-vh45-f885-3848 is a critical-severity vulnerability affecting sm-crypto, rated CVSS 9.5. Published July 25, 2026.
View full advisory at GHSA →