PatchSiren

JuneAndGreen CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL JuneAndGreen CVE published 2026-08-13

CVE-2026-73567

CVE-2026-73567 debrief based on the supplied source corpus. The CVE record was published on 2026-08-13T18:18:19.387Z and has not been modified since then. The sm-crypto library, used for implementing Chinese cryptographic algorithms, had a vulnerability in its SM2 key pair generation process. Prior to version 0.5.0, the default no-argument sm2.generateKeyPairHex() path in Node.js used a module-wide Secure [truncated]