CVE-2026-23967

creationtimestamp| type| source ---|---|--- 2026-01-22 04:03:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycjlc4522h 2026-01-22 04:03:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyckhdi7u2g 2026-01-22 04:04:54+00:00| seen|...

CVE-2026-23967 sm-crypto Affected by Signature Malleability in SM2-DSA

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can derive a new valid signature for a...