{"id":"CVE-2025-69277","aliases":["GHSA-mrfv-m5wm-5w6w","PYSEC-2026-1448","PYSEC-2026-3002"],"title":"libsodium has Incomplete List of Disallowed Inputs","summary":"libsodium has Incomplete List of Disallowed Inputs","severity":"medium","cvss":4.5,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","vendor":"paragonie","product":"paragonie/sodium_compat","ecosystem":"composer","affected":["paragonie/sodium_compat >= 2, < 2.5.0","paragonie/sodium_compat < 1.24.0","pynacl < 1.6.2","hdwallet < 3.6.1"],"patched":["paragonie/sodium_compat 2.5.0","paragonie/sodium_compat 1.24.0","pynacl 1.6.2","hdwallet 3.6.1"],"published":"2025-12-31","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:32.114968115Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-mrfv-m5wm-5w6w","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69277"},{"url":"https://github.com/pyca/pynacl/issues/920"},{"url":"https://github.com/hdwallet-io/python-hdwallet/pull/124"},{"url":"https://github.com/jedisct1/libsodium/commit/ad3004ec8731730e93fcfbbc824e67eadc1c1bae"},{"url":"https://github.com/paragonie/sodium_compat/commit/2cb48f26130919f92f30650bdcc30e6f4ebe45ac"},{"url":"https://github.com/paragonie/sodium_compat/commit/4714da6efdc782c06690bc72ce34fae7941c2d9f"},{"url":"https://github.com/pyca/pynacl/commit/96314884d88d1089ff5f336dba61d7abbcddbbf7"},{"url":"https://github.com/pyca/pynacl/commit/ecf41f55a3d8f1e10ce89c61c4b4d67f3f4467cf"},{"url":"https://00f.net/2025/12/30/libsodium-vulnerability"},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/paragonie/sodium_compat/2025-12-30.yaml"},{"url":"https://github.com/paragonie/sodium_compat"},{"url":"https://ianix.com/pub/ed25519-deployment.html"},{"url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00004.html"},{"url":"https://news.ycombinator.com/item?id=46435614"}],"tags":["osv","composer"],"epss":0.00184,"epssPercentile":0.08257,"ingestedAt":"2026-07-08T18:25:51.429Z","slug":"CVE-2025-69277","body":"## Overview\n\nlibsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.\n\nThis advisoory lists packages in the GitHub Advisory Database's [supported ecosystems](https://github.com/github/advisory-database?tab=readme-ov-file#supported-ecosystems) that are affected by this vulnerability due to a vulnerable dependency.\n\n## Affected packages\n\n- `paragonie/sodium_compat >= 2, < 2.5.0`\n- `paragonie/sodium_compat < 1.24.0`\n- `pynacl < 1.6.2`\n- `hdwallet < 3.6.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `paragonie/sodium_compat 2.5.0`\n- `paragonie/sodium_compat 1.24.0`\n- `pynacl 1.6.2`\n- `hdwallet 3.6.1`","depth":"sunlit","depthScore":25,"depthScoreParts":{"impact":24.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}