{"cve":"CVE-2026-73567","nvd":{"published":"2026-08-13T18:18:19.387","modified":"2026-10-24T15:10:00.190","status":"Deferred","description":"sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex() path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by jsbn@1.1.0, which seeds an ARC4 stream from Math.random() and new Date().getTime() because window.crypto.getRandomValues is unavailable even though globalThis.crypto exists. An attacker who can observe the process's Math.random() outputs and estimate the key-generation time can reconstruct the seed, recover generated SM2 private keys, and predict signing ephemeral scalars used to forge signatures. This issue is fixed in version 0.5.0.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","score":9.1},"cwes":["CWE-338"],"references":["https://github.com/JuneAndGreen/sm-crypto/commit/1f9bd7bd160c24efd9c26c8f7fda997c68c823d0","https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848"],"products":[],"source":"nvd","synced_at":"2026-10-24T16:53:35.584907681+00:00"},"epss":{"cve":"CVE-2026-73567","score":0.00444,"percentile":0.38295,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-vh45-f885-3848","url":"https://osv.dev/vulnerability/GHSA-vh45-f885-3848","summary":"sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock","modified":"2026-08-13T17:55:56.606058Z","packages":[{"ecosystem":"npm","name":"sm-crypto","purl":"pkg:npm/sm-crypto","ranges":["<0.5.0"],"fixed":["0.5.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}