{"schemaVersion":3,"id":"CVE-2025-69277","aliases":["ALPINE-CVE-2025-69277","MGASA-2026-0004","GHSA-mrfv-m5wm-5w6w","PYSEC-2026-1448","PYSEC-2026-3002","RHSA-2026:7369","UBUNTU-CVE-2025-69277","USN-7949-1","DEBIAN-CVE-2025-69277","DLA-4435-1","DSA-6094-1","CGA-4hjv-x4g4-5crh","CGA-5fh8-63hp-jc23","CGA-7747-fcw3-jw62","CGA-937h-5p3g-6qg4","CGA-9g96-c25v-9j36","CGA-f24v-4x9q-cpg2","CGA-fh6q-6wfw-6955","CGA-ghp4-r6cv-rxv7","CGA-h8jj-f27g-3qc9","CGA-p7pg-2v3g-j4qp","CGA-qf7m-r5j2-3h49","CGA-rhqr-76m8-3jmx","openSUSE-SU-2026:10130-1","CGA-23gf-g32h-5c2q","CGA-2xgf-jp54-4294","CGA-3725-h5rx-x74j","CGA-3fx5-rm62-r954","CGA-486h-49p8-crwc","CGA-7x92-43wr-9fr9","CGA-86hg-v7xg-wcqm","CGA-89hh-mg35-f5g5","CGA-fw8h-cmcm-w65q","CGA-g6g6-92r6-4mj7","CGA-gm44-gx4w-mpvr","CGA-gqrc-8cg4-q2hx","CGA-gxhv-hwr3-xfv9","CGA-m2vq-3mjx-2jqc","CGA-qhw2-jjf8-vvq6","CGA-wc3c-pjh5-rqvg","CGA-wgpm-3r6j-2qfc","CGA-x26c-944h-95xw"],"status":"published","duplicateOf":null,"title":null,"description":"libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.","dates":{"published":"2025-12-31T05:50:07.422Z","modified":"2026-01-07T17:06:43.302Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00182,"percentile":0.07366,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":-0.0020000000000000052,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00184},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00182,"percentile":0.07366}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00184,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00182,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00182,"percentile":0.07366}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-184","name":"Incomplete List of Disallowed Inputs","description":"The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/184.html"}],"affected":[{"vendor":"alpine","product":"libsodium","name":"libsodium","label":"libsodium","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/libsodium","purlType":"apk","versions":[{"text":"< 1.0.19-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.0.20-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.19-r1 | < 1.0.20-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-2","name":"airflow-2","label":"airflow-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2","purlType":"apk","versions":[{"text":"< 2.11.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-2-bitnami-compat","name":"airflow-2-bitnami-compat","label":"airflow-2-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2-bitnami-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-3","name":"airflow-3","label":"airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-3","purlType":"apk","versions":[{"text":"< 3.1.6-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.6-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-3-bitnami-compat","name":"airflow-3-bitnami-compat","label":"airflow-3-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-3-bitnami-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"az","name":"az","label":"az","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/az","purlType":"apk","versions":[{"text":"< 2.82.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.82.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.71-core-integrations","name":"datadog-agent-7.71-core-integrations","label":"datadog-agent-7.71-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.71-core-integrations","purlType":"apk","versions":[{"text":"< 7.71.2-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.71.2-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.72-core-integrations","name":"datadog-agent-7.72-core-integrations","label":"datadog-agent-7.72-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.72-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.73-core-integrations","name":"datadog-agent-7.73-core-integrations","label":"datadog-agent-7.73-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.73-core-integrations","purlType":"apk","versions":[{"text":"< 7.73.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.73.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.74-core-integrations","name":"datadog-agent-7.74-core-integrations","label":"datadog-agent-7.74-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.74-core-integrations","purlType":"apk","versions":[{"text":"< 7.74.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.74.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.71-core-integrations","name":"datadog-agent-fips-7.71-core-integrations","label":"datadog-agent-fips-7.71-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.71-core-integrations","purlType":"apk","versions":[{"text":"< 7.71.2-r19","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 7.71.2-r19 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.72-core-integrations","name":"datadog-agent-fips-7.72-core-integrations","label":"datadog-agent-fips-7.72-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.72-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.74-core-integrations","name":"datadog-agent-fips-7.74-core-integrations","label":"datadog-agent-fips-7.74-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.74-core-integrations","purlType":"apk","versions":[{"text":"< 7.74.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.74.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pgadmin4","name":"pgadmin4","label":"pgadmin4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pgadmin4","purlType":"apk","versions":[{"text":"< 9.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"superset-5.0","name":"superset-5.0","label":"superset-5.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/superset-5.0","purlType":"apk","versions":[{"text":"< 5.0.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"airflow-3","name":"airflow-3","label":"airflow-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/airflow-3","purlType":"apk","versions":[{"text":"< 3.1.6-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.6-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"airflow-3-bitnami-compat","name":"airflow-3-bitnami-compat","label":"airflow-3-bitnami-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/airflow-3-bitnami-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"az","name":"az","label":"az","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/az","purlType":"apk","versions":[{"text":"< 2.82.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.82.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.72-core-integrations","name":"datadog-agent-7.72-core-integrations","label":"datadog-agent-7.72-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.72-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.73-core-integrations","name":"datadog-agent-7.73-core-integrations","label":"datadog-agent-7.73-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.73-core-integrations","purlType":"apk","versions":[{"text":"< 7.73.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.73.3-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.74-core-integrations","name":"datadog-agent-7.74-core-integrations","label":"datadog-agent-7.74-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.74-core-integrations","purlType":"apk","versions":[{"text":"< 7.74.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.74.1-r2","eol":null,"hubHref":null},{"vendor":"paragonie","product":"sodium_compat","name":"paragonie/sodium_compat","label":"sodium_compat","ecosystem":"Packagist","cpePart":null,"purl":"pkg:composer/paragonie/sodium_compat","purlType":"composer","versions":[{"text":"≥ 2, < 2.5.0","noFixRecorded":false,"fixedIn":null},{"text":"< 1.24.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2, < 2.5.0 | < 1.24.0","eol":null,"hubHref":null},{"vendor":"debian","product":"libsodium","name":"libsodium","label":"libsodium","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libsodium","purlType":"deb","versions":[{"text":"< 1.0.18-2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.0.18-1+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.0.18-1+deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.0.18-1+deb11u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.18-2 | < 1.0.18-1+deb12u1 | < 1.0.18-1+deb13u1 | < 1.0.18-1+deb11u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libsodium","name":"libsodium","label":"libsodium","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libsodium","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.0.18-1ubuntu0.22.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.0.18-1ubuntu0.24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.0.18-1ubuntu0.25.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.0.18-1ubuntu0.22.04.1 | < 1.0.18-1ubuntu0.24.04.1 | < 1.0.18-1ubuntu0.25.10.1","eol":null,"hubHref":null},{"vendor":"libsodium","product":"libsodium","name":"libsodium","label":"libsodium","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< ad3004ec8731730e93fcfbbc824e67eadc1c1bae","noFixRecorded":false,"fixedIn":null}],"versionsText":"< ad3004ec8731730e93fcfbbc824e67eadc1c1bae","eol":null,"hubHref":"/vendor/libsodium/libsodium"},{"vendor":"mageia","product":"sodium","name":"sodium","label":"sodium","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/sodium","purlType":"rpm","versions":[{"text":"< 1.0.18-3.1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.18-3.1.mga9","eol":null,"hubHref":null},{"vendor":"PyPI","product":"hdwallet","name":"hdwallet","label":"hdwallet","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/hdwallet","purlType":"pypi","versions":[{"text":"< 3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1","eol":null,"hubHref":null},{"vendor":"PyPI","product":"pynacl","name":"pynacl","label":"pynacl","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/pynacl","purlType":"pypi","versions":[{"text":"< 1.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.2","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-PyNaCl&distro=openSUSE Tumbleweed","name":"python-PyNaCl","label":"python-PyNaCl&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-PyNaCl&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 1.6.2-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.2-1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsodium","name":"libsodium","label":"libsodium","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsodium","purlType":"rpm","versions":[{"text":"< 0:1.0.22-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.22-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsodium-devel","name":"libsodium-devel","label":"libsodium-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsodium-devel","purlType":"rpm","versions":[{"text":"< 0:1.0.22-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.22-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"libsodium-static","name":"libsodium-static","label":"libsodium-static","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/libsodium-static","purlType":"rpm","versions":[{"text":"< 0:1.0.22-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.22-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mingw32-libsodium","name":"mingw32-libsodium","label":"mingw32-libsodium","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mingw32-libsodium","purlType":"rpm","versions":[{"text":"< 0:1.0.22-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.22-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mingw64-libsodium","name":"mingw64-libsodium","label":"mingw64-libsodium","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mingw64-libsodium","purlType":"rpm","versions":[{"text":"< 0:1.0.22-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.22-1.hum1","eol":null,"hubHref":null}],"affectedCount":34,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/jedisct1/libsodium/commit/ad3004ec8731730e93fcfbbc824e67eadc1c1bae","label":"github.com/jedisct1/libsodium/commit/ad3004ec8731730e93fcfbbc824e67eadc1c1bae","hostname":"github.com","tags":["WEB","ARTICLE","FIX"]},{"url":"https://00f.net/2025/12/30/libsodium-vulnerability/","label":"00f.net/2025/12/30/libsodium-vulnerability/","hostname":"00f.net","tags":["ARTICLE","REPORT","WEB"]},{"url":"https://news.ycombinator.com/item?id=46435614","label":"news.ycombinator.com/item?id=46435614","hostname":"news.ycombinator.com","tags":["WEB","ARTICLE","REPORT"]},{"url":"https://ianix.com/pub/ed25519-deployment.html","label":"ianix.com/pub/ed25519-deployment.html","hostname":"ianix.com","tags":["WEB","ARTICLE","REPORT"]},{"url":"https://github.com/pyca/pynacl/issues/920","label":"github.com/pyca/pynacl/issues/920","hostname":"github.com","tags":["WEB","REPORT"]},{"url":"https://github.com/pyca/pynacl/commit/ecf41f55a3d8f1e10ce89c61c4b4d67f3f4467cf","label":"github.com/pyca/pynacl/commit/ecf41f55a3d8f1e10ce89c61c4b4d67f3f4467cf","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://github.com/pyca/pynacl/commit/96314884d88d1089ff5f336dba61d7abbcddbbf7","label":"github.com/pyca/pynacl/commit/96314884d88d1089ff5f336dba61d7abbcddbbf7","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00004.html","label":"lists.debian.org/debian-lts-announce/2026/01/msg00004.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-69277","label":"security.alpinelinux.org/vuln/CVE-2025-69277","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0004.html","label":"advisories.mageia.org/MGASA-2026-0004.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34940","label":"bugs.mageia.org/show_bug.cgi?id=34940","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00002.html","label":"lists.debian.org/debian-security-announce/2026/msg00002.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69277","label":"nvd.nist.gov/vuln/detail/CVE-2025-69277","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/hdwallet-io/python-hdwallet/pull/124","label":"github.com/hdwallet-io/python-hdwallet/pull/124","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/paragonie/sodium_compat/commit/2cb48f26130919f92f30650bdcc30e6f4ebe45ac","label":"github.com/paragonie/sodium_compat/commit/2cb48f26130919f92f30650bdcc30e6f4ebe45ac","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/paragonie/sodium_compat/commit/4714da6efdc782c06690bc72ce34fae7941c2d9f","label":"github.com/paragonie/sodium_compat/commit/4714da6efdc782c06690bc72ce34fae7941c2d9f","hostname":"github.com","tags":["WEB"]},{"url":"https://00f.net/2025/12/30/libsodium-vulnerability","label":"00f.net/2025/12/30/libsodium-vulnerability","hostname":"00f.net","tags":["WEB"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/paragonie/sodium_compat/2025-12-30.yaml","label":"github.com/FriendsOfPHP/security-advisories/blob/master/paragonie/sodium_compat/2025-12-30.yaml","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/paragonie/sodium_compat","label":"github.com/paragonie/sodium_compat","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://pypi.org/project/hdwallet","label":"pypi.org/project/hdwallet","hostname":"pypi.org","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-mrfv-m5wm-5w6w","label":"github.com/advisories/GHSA-mrfv-m5wm-5w6w","hostname":"github.com","tags":["Advisory"]},{"url":"https://pypi.org/project/pynacl","label":"pypi.org/project/pynacl","hostname":"pypi.org","tags":["PACKAGE"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7369","label":"access.redhat.com/errata/RHSA-2026:7369","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://images.redhat.com/","label":"images.redhat.com","hostname":"images.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69277","label":"access.redhat.com/security/cve/CVE-2025-69277","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/updates/classification/","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7369.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7369.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2426416","label":"bugzilla.redhat.com/show_bug.cgi?id=2426416","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69277","label":"www.cve.org/CVERecord?id=CVE-2025-69277","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-69277","label":"ubuntu.com/security/CVE-2025-69277","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7949-1","label":"ubuntu.com/security/notices/USN-7949-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-69277","label":"security-tracker.debian.org/tracker/CVE-2025-69277","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69277.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69277.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69277","label":"www.suse.com/security/cve/CVE-2025-69277","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["SUSE-SU-2026:0368-1","SUSE-SU-2026:0482-1","SUSE-SU-2026:20448-1","SUSE-SU-2026:20484-1","SUSE-SU-2026:4368-1"],"duplicates":[],"related":["CGA-3W6R-7HGH-CHW3","SUSE-SU-2026:0368-1","SUSE-SU-2026:0482-1","SUSE-SU-2026:20448-1","SUSE-SU-2026:20484-1","SUSE-SU-2026:4368-1"]},"timeline":[{"kind":"published","date":"2025-12-31T05:50:07.422Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-01-07T17:06:43.302Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T16:37:00.870Z","stale":false,"partial":false}}