{"api_version":"v1","generated_at":"2026-10-09T16:55:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-juneandgreen-sm-crypto-08c41ae65465","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/sm-crypto","name":"sm-crypto","next_cursor":null,"observations":[{"affected":"sm-crypto: < 0.5.0","affected_versions_present":true,"cve_id":"CVE-2026-73567","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73567","fixed":"0.5.0.","last_modified":"2026-08-14T18:09:20.763Z","patch_url":"https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-vh45-f885-3848","primary_source":"","published":"2026-08-13T17:40:54.016Z"},{"affected":"< 0.3.14","affected_versions_present":true,"cve_id":"CVE-2026-23966","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23966","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-22T15:49:07.259Z","patch_url":"https://github.com/JuneAndGreen/sm-crypto/commit/b1c824e58fdf1eaa73692c124a095819a8c45707","primary_source":"","published":"2026-01-22T02:06:54.003Z"},{"affected":"< 0.4.0","affected_versions_present":true,"cve_id":"CVE-2026-23965","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23965","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-22T15:58:10.585Z","patch_url":"https://github.com/JuneAndGreen/sm-crypto/commit/85295a859d0766222d12ce2be3e6fce7b438b510","primary_source":"","published":"2026-01-22T02:05:43.426Z"},{"affected":"< 0.3.14","affected_versions_present":true,"cve_id":"CVE-2026-23967","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-23967","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T16:03:58.987Z","patch_url":"","primary_source":"","published":"2026-01-22T01:59:30.555Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"JuneAndGreen"}}