StackRadar

CVE-2025-69277

Medium

Advisory

Published 31 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
322
of 17,781 indexed, latest versions
Container images
301
deployed by those charts
Fix available
4 of 4
affected packages

libsodium has Incomplete List of Disallowed Inputs

Carried by container images the latest versions of 322 of 17,781 indexed charts deploy, on 301 images.

Affected packageAffected versionsFixed inImages
libsodiumdeb1.0.8-5, 1.0.16-2, 1.0.18-1, 1.0.18-1+b2+2 more1.0.18-1+deb11u1, 1.0.18-1+deb12u1, 1.0.18-1+deb13u1, 1.0.18-1ubuntu0.22.04.1+2 more148
pynaclpypi1.2.1, 1.3.0, 1.4.0, 1.5.0+2 more1.6.2129
libsodiumapk1.0.19-r0, 1.0.20-r01.0.19-r1, 1.0.20-r123
paragonie/sodium_compatcomposerv1.16.1, v1.17.1, v1.19.0, v1.20.0+2 more1.24.011
OSV records
ALPINE-CVE-2025-69277DEBIAN-CVE-2025-69277GHSA-mrfv-m5wm-5w6wUBUNTU-CVE-2025-69277DLA-4435-1
Also known as
DSA-6094-1, PYSEC-2026-1448, PYSEC-2026-3002, USN-7949-1

Charts affected

322 by stars
ChartLatestAffected imagesRadar Score
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
pynacl@1.4.0
1.6.2

Open the chart page →

5,841
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

9,102
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

12,048
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
pynacl@1.3.0
1.6.2

Open the chart page →

18,756
agentssynapse0.1.301 of 9See more

agents synapse 0.1.30

1 of the 9 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
pynacl@1.4.0
1.6.2

Open the chart page →

7,244
scribesynapse0.2.161 of 7See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
pynacl@1.4.0
1.6.2

Open the chart page →

2,680
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
pynacl@1.4.0
1.6.2

Open the chart page →

1,955
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

17,461
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
paragonie/sodium_compat@v1.23.0
1.24.0

Open the chart page →

5,704
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

9,616
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
pynacl@1.4.0
1.6.2

Open the chart page →

5,321
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

10,086
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
libsodium@1.0.18-1
no fix listed

Open the chart page →

10,006
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
pynacl@1.5.0
1.6.2

Open the chart page →

3,164
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

3,176
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pynacl@1.5.0
1.6.2

Open the chart page →

4,768
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

2,132
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
pynacl@1.5.0
1.6.2

Open the chart page →

7,085
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

10,001
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

2,021
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

14,100

Container images carrying it

301 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
pynacl@1.5.0
1.6.2
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libsodium@1.0.18-1
1.0.18-1+deb12u1
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
pynacl@1.5.0
1.6.2
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
pynacl@1.5.0
1.6.2
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
pynacl@1.5.0
1.6.2
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
libsodium@1.0.20-r0
1.0.20-r1
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
libsodium@1.0.18-1
1.0.18-1+deb12u1
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libsodium@1.0.18-1
1.0.18-1+deb12u1
1
ghcr.io/grycap/im:latest06a16d4f279f
libsodium@1.0.18-1build3
pynacl@1.6.0
1.0.18-1ubuntu0.24.04.1
1.6.2
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
libsodium@1.0.20-r0
pynacl@1.5.0
1.0.20-r1
1.6.2
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
libsodium@1.0.20-r0
pynacl@1.6.0
1.0.20-r1
1.6.2
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pynacl@1.5.0
1.6.2
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pynacl@1.5.0
1.6.2
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
libsodium@1.0.20-r0
1.0.20-r1
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libsodium@1.0.18-1
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libsodium@1.0.18-1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
libsodium@1.0.20-r0
1.0.20-r1
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
libsodium@1.0.20-r0
1.0.20-r1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
libsodium@1.0.18-1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
libsodium@1.0.18-1
no fix listed
1
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libsodium@1.0.16-2
no fix listed
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
pynacl@1.5.0
1.6.2
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/monicahq/monica-next:main8be69156acbb
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
libsodium@1.0.18-1
1.0.18-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libsodium@1.0.18-1
1.0.18-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libsodium@1.0.18-1
1.0.18-1+deb12u1
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
pynacl@1.6.0
1.6.2
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libsodium@1.0.18-1
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
pynacl@1.5.0
1.6.2
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libsodium@1.0.18-1
1.0.18-1+deb11u1
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
libsodium@1.0.19-r0
1.0.19-r1
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
pynacl@1.6.0
1.6.2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libsodium@1.0.18-1
paragonie/sodium_compat@v1.16.1
no fix listed
1.24.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
pynacl@1.5.0
1.6.2
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
libsodium@1.0.16-2
no fix listed
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
pynacl@1.4.0
1.6.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.