https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-23967.htmlhttps://patchthecve.com/cve/CVE-2026-23967.htmlWed, 17 Jun 2026 10:22:22 +0000HIGH 7.5: sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can derive a new valid signature for a previoushttps://patchthecve.com/cve/CVE-2026-23966.htmlhttps://patchthecve.com/cve/CVE-2026-23966.htmlWed, 17 Jun 2026 10:22:22 +0000CRITICAL 9.1: sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interface multiple times, an attacker can fullhttps://patchthecve.com/cve/CVE-2026-23965.htmlhttps://patchthecve.com/cve/CVE-2026-23965.htmlWed, 17 Jun 2026 10:22:21 +0000HIGH 7.5: sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature forgery vulnerability exists in the SM2 signature verification logic of sm-crypto prior to version 0.4.0. Under default configurations, an attacker can forge valid signatures for arbi