JuneAndGreen vulnerabilities
We track 4 vulnerabilities in JuneAndGreen products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.
Latest JuneAndGreen vulnerabilities
- 9.1 Critical severity
sm-crypto: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex() path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied b
- 7.5 High severity
sm-crypto: Improper Verification of Cryptographic Signature
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can der
- 9.1 Critical severity
sm-crypto: Insufficient Verification of Data Authenticity
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interf
- 7.5 High severity
sm-crypto: Improper Verification of Cryptographic Signature
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature forgery vulnerability exists in the SM2 signature verification logic of sm-crypto prior to version 0.4.0. Under default configurations, an atta