sm2 vulnerabilities (crates.io)

3 vulnerabilities.

• sm2 crates.io RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE CVE-2026-22700 7.5 HighJanuary 10, 2026
• sm2 crates.io RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt() CVE-2026-22699 7.5 HighJanuary 9, 2026
• sm2 crates.io RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability CVE-2026-22698 8.7 HighJanuary 9, 2026