StackRadar

CVE-2025-69277

Medium

Advisory

Published 31 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
322
of 17,781 indexed, latest versions
Container images
301
deployed by those charts
Fix available
4 of 4
affected packages

libsodium has Incomplete List of Disallowed Inputs

Carried by container images the latest versions of 322 of 17,781 indexed charts deploy, on 301 images.

Affected packageAffected versionsFixed inImages
libsodiumdeb1.0.8-5, 1.0.16-2, 1.0.18-1, 1.0.18-1+b2+2 more1.0.18-1+deb11u1, 1.0.18-1+deb12u1, 1.0.18-1+deb13u1, 1.0.18-1ubuntu0.22.04.1+2 more148
pynaclpypi1.2.1, 1.3.0, 1.4.0, 1.5.0+2 more1.6.2129
libsodiumapk1.0.19-r0, 1.0.20-r01.0.19-r1, 1.0.20-r123
paragonie/sodium_compatcomposerv1.16.1, v1.17.1, v1.19.0, v1.20.0+2 more1.24.011
OSV records
ALPINE-CVE-2025-69277DEBIAN-CVE-2025-69277GHSA-mrfv-m5wm-5w6wUBUNTU-CVE-2025-69277DLA-4435-1
Also known as
DSA-6094-1, PYSEC-2026-1448, PYSEC-2026-3002, USN-7949-1

Charts affected

322 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

13,761
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
pynacl@1.4.0
1.6.2

Open the chart page →

4,568
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

5,056
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
pynacl@1.5.0
1.6.2

Open the chart page →

8,823
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
pynacl@1.5.0
1.6.2

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

10,858
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

18,376
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

1,685
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
libsodium@1.0.16-2
no fix listed

Open the chart page →

6,500
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1

Open the chart page →

12,840
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
pynacl@1.3.0
1.6.2

Open the chart page →

2,034
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libsodium@1.0.18-1
no fix listed

Open the chart page →

17,377
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

2,096
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

3,924
shlinkgeek-cookbookVerified publisher5.2.01 of 1See more

shlink geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
shlinkio/shlink:2.7.1c6729db1d3a8
paragonie/sodium_compat@v1.16.1
1.24.0

Open the chart page →

2,056
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
libsodium@1.0.18-1
no fix listed

Open the chart page →

15,856
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

3,646
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
pynacl@1.5.0
1.6.2

Open the chart page →

15,562
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
libsodium@1.0.19-r0
1.0.19-r1

Open the chart page →

6,416
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
libsodium@1.0.18-1build3
pynacl@1.6.0
1.0.18-1ubuntu0.24.04.1
1.6.2

Open the chart page →

4,132
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

10,072
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
pynacl@1.5.0
1.6.2
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
pynacl@1.5.0
1.6.2

Open the chart page →

16,514
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
filegator/filegator:latestce163db220d4
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

5,508
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

20,403
opennebulakvaps2.1.12 of 9See more

opennebula kvaps 2.1.1

2 of the 9 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
libsodium@1.0.18-1
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
libsodium@1.0.18-1
no fix listed

Open the chart page →

113,791
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

5,654
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

35,050
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
pynacl@1.5.0
1.6.2

Open the chart page →

4,292
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.25.10.1

Open the chart page →

11,103
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
pynacl@1.5.0
1.6.2

Open the chart page →

14,334
opsopsVerified publisher1.2.01 of 2See more

ops ops 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
shaowenchen/ops-server:latest315444f703f4
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

8,939
phonebook-chartphonebook-chart0.1.01 of 3See more

phonebook-chart phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

3,034
phpipamphpipam-helmVerified publisher1.0.121 of 3See more

phpipam phpipam-helm 1.0.12

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:8.0.40d58ac93387f6
pynacl@1.5.0
1.6.2

Open the chart page →

3,778
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

7,405
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

7,740
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

5,315
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

5,213
smarter-demosmarterOfficialVerified publisher0.1.51 of 7See more

smarter-demo smarter 0.1.5

1 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libsodium@1.0.18-1
no fix listed

Open the chart page →

45,832
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
pynacl@1.4.0
1.6.2

Open the chart page →

2,469
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
pynacl@1.5.0
1.6.2

Open the chart page →

3,332
phonebook-chartusuladamsVerified publisher0.1.51 of 3See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

3,176
postfixadminvolker-raschekVerified publisher0.3.11 of 1See more

postfixadmin volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
volkerraschek/postfixadmin:3.3.13c4f10aebf87b
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

1,083
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1

Open the chart page →

7,696
redirectwyrihaximusnetVerified publisher1.1.01 of 1See more

redirect wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
libsodium@1.0.19-r0
1.0.19-r1

Open the chart page →

1,581
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
pynacl@1.5.0
1.6.2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
pynacl@1.5.0
1.6.2

Open the chart page →

13,613
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
pynacl@1.5.0
1.6.2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
pynacl@1.5.0
1.6.2

Open the chart page →

11,285
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

4,880
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
pynacl@1.6.1
1.6.2

Open the chart page →

1,565
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1

Open the chart page →

7,489
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
pynacl@1.5.0
1.6.2

Open the chart page →

2,418

Container images carrying it

301 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
libsodium@1.0.19-r0
1.0.19-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.