StackRadar

CVE-2025-69277

Medium

Advisory

Published 31 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
322
of 17,781 indexed, latest versions
Container images
301
deployed by those charts
Fix available
4 of 4
affected packages

libsodium has Incomplete List of Disallowed Inputs

Carried by container images the latest versions of 322 of 17,781 indexed charts deploy, on 301 images.

Affected packageAffected versionsFixed inImages
libsodiumdeb1.0.8-5, 1.0.16-2, 1.0.18-1, 1.0.18-1+b2+2 more1.0.18-1+deb11u1, 1.0.18-1+deb12u1, 1.0.18-1+deb13u1, 1.0.18-1ubuntu0.22.04.1+2 more148
pynaclpypi1.2.1, 1.3.0, 1.4.0, 1.5.0+2 more1.6.2129
libsodiumapk1.0.19-r0, 1.0.20-r01.0.19-r1, 1.0.20-r123
paragonie/sodium_compatcomposerv1.16.1, v1.17.1, v1.19.0, v1.20.0+2 more1.24.011
OSV records
ALPINE-CVE-2025-69277DEBIAN-CVE-2025-69277GHSA-mrfv-m5wm-5w6wUBUNTU-CVE-2025-69277DLA-4435-1
Also known as
DSA-6094-1, PYSEC-2026-1448, PYSEC-2026-3002, USN-7949-1

Charts affected

322 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
pynacl@1.5.0
1.6.2

Open the chart page →

11,367
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
pynacl@1.5.0
1.6.2

Open the chart page →

9,145
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

10,622
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
pynacl@1.4.0
1.6.2

Open the chart page →

4,983
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1

Open the chart page →

19,391
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

33,725
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pynacl@1.5.0
1.6.2

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
pynacl@1.5.0
1.6.2

Open the chart page →

6,543
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
pynacl@1.5.0
1.6.2

Open the chart page →

5,987
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
pynacl@1.5.0
1.6.2

Open the chart page →

6,041
docker-mailserverdocker-mailserver0.4.01 of 2See more

docker-mailserver docker-mailserver 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
mailserver/docker-mailserver:11.0.0e0809756dc96
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

1,382
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
libsodium@1.0.18-1
no fix listed

Open the chart page →

18,509
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
pynacl@1.5.0
1.6.2
stackstorm/st2api:3.86f56d239d280
pynacl@1.5.0
1.6.2
stackstorm/st2auth:3.833ecfda16608
pynacl@1.5.0
1.6.2
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
pynacl@1.5.0
1.6.2
stackstorm/st2notifier:3.8f190a6212195
pynacl@1.5.0
1.6.2
stackstorm/st2rulesengine:3.8259503496ff9
pynacl@1.5.0
1.6.2
stackstorm/st2scheduler:3.8b1de2055c362
pynacl@1.5.0
1.6.2
stackstorm/st2sensorcontainer:3.8b1a338f64773
pynacl@1.5.0
1.6.2
stackstorm/st2stream:3.81c8904a3bf67
pynacl@1.5.0
1.6.2
stackstorm/st2timersengine:3.81bf35bfaf00c
pynacl@1.5.0
1.6.2
stackstorm/st2workflowengine:3.819fdfffdbba8
pynacl@1.5.0
1.6.2

Open the chart page →

96,419
adminercetic0.2.11 of 1See more

adminer cetic 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/adminer:4.8.1-standalone34d37131366c
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

461
krokicowboysysopVerified publisher6.1.04 of 5See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
yuzutech/kroki-bpmn:0.29.1444805c4b917
libsodium@1.0.20-r0
1.0.20-r1
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
libsodium@1.0.20-r0
1.0.20-r1
yuzutech/kroki-excalidraw:0.29.157917319ea70
libsodium@1.0.20-r0
1.0.20-r1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

6,743
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
mautic/mautic:v4-apache94ea4acf4049
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

2,667
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1

Open the chart page →

5,634
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
pynacl@1.5.0
1.6.2

Open the chart page →

17,245
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
libsodium@1.0.18-1
no fix listed

Open the chart page →

30,668
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
paragonie/sodium_compat@v1.23.0
1.24.0

Open the chart page →

2,582
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

3,543
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
paragonie/sodium_compat@v1.20.0
1.24.0

Open the chart page →

2,709
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

14,240
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/adminer:4.8.1-standalone34d37131366c
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

52,919
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

27,267
glpiglpi-conteiner0.1.02 of 3See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
paragonie/sodium_compat@v1.23.0
1.24.0
vdiogov/glpi-conteiner:latest6945f84f0058
libsodium@1.0.18-1
paragonie/sodium_compat@v1.17.1
1.0.18-1+deb12u1
1.24.0

Open the chart page →

12,170
piholesavepointsamVerified publisher0.2.01 of 1See more

pihole savepointsam 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
pihole/pihole:2023.05.0b83258064f54
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

1,048
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
pynacl@1.5.0
1.6.2

Open the chart page →

1,650
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

19,337
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
pynacl@1.4.0
1.6.2

Open the chart page →

4,019
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
pynacl@1.5.0
1.6.2

Open the chart page →

14,546
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1

Open the chart page →

4,309
mysql-clusterkfirfer0.0.41 of 1See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
mysql/mysql-cluster:8.0.20e4ea36622cdd
pynacl@1.3.0
1.6.2

Open the chart page →

416
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
pynacl@1.4.0
1.6.2

Open the chart page →

14,204
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

18,517
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
paragonie/sodium_compat@v1.23.0
1.24.0

Open the chart page →

2,582
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libsodium@1.0.18-1
no fix listed

Open the chart page →

24,488
roundcubevolker-raschekVerified publisher0.3.11 of 1See more

roundcube volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

1,797
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1

Open the chart page →

12,037
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
pynacl@1.5.0
1.6.2

Open the chart page →

2,388
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

7,740
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
pynacl@1.4.0
1.6.2

Open the chart page →

2,947
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1

Open the chart page →

13,357
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

7,190
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1

Open the chart page →

5,059
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

7,190
block-buster-helm-appblock-buster-app7.6.01 of 1See more

block-buster-helm-app block-buster-app 7.6.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

977
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

10,817
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
libsodium@1.0.8-5
no fix listed

Open the chart page →

36,094
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
pynacl@1.5.0
1.6.2

Open the chart page →

11,205

Container images carrying it

301 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
libsodium@1.0.19-r0
1.0.19-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.