StackRadar

CVE-2025-69277

Medium

Advisory

Published 31 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
322
of 17,781 indexed, latest versions
Container images
301
deployed by those charts
Fix available
4 of 4
affected packages

libsodium has Incomplete List of Disallowed Inputs

Carried by container images the latest versions of 322 of 17,781 indexed charts deploy, on 301 images.

Affected packageAffected versionsFixed inImages
libsodiumdeb1.0.8-5, 1.0.16-2, 1.0.18-1, 1.0.18-1+b2+2 more1.0.18-1+deb11u1, 1.0.18-1+deb12u1, 1.0.18-1+deb13u1, 1.0.18-1ubuntu0.22.04.1+2 more148
pynaclpypi1.2.1, 1.3.0, 1.4.0, 1.5.0+2 more1.6.2129
libsodiumapk1.0.19-r0, 1.0.20-r01.0.19-r1, 1.0.20-r123
paragonie/sodium_compatcomposerv1.16.1, v1.17.1, v1.19.0, v1.20.0+2 more1.24.011
OSV records
ALPINE-CVE-2025-69277DEBIAN-CVE-2025-69277GHSA-mrfv-m5wm-5w6wUBUNTU-CVE-2025-69277DLA-4435-1
Also known as
DSA-6094-1, PYSEC-2026-1448, PYSEC-2026-3002, USN-7949-1

Charts affected

322 by stars
ChartLatestAffected imagesRadar Score
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
pynacl@1.3.0
1.6.2
voltha/voltha-netconf:1.6.037f80524c207
pynacl@1.3.0
1.6.2
voltha/voltha-ofagent:1.6.09ee8c1f4428c
pynacl@1.3.0
1.6.2
voltha/voltha-voltha:1.6.0ff596b62de59
pynacl@1.3.0
1.6.2

Open the chart page →

93,855
openldapopenldap0.1.11 of 2See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

5,293
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

3,423
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

3,423
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
pynacl@1.4.0
1.6.2

Open the chart page →

36,215
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
pynacl@1.5.0
1.6.2

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
pynacl@1.5.0
1.6.2

Open the chart page →

6,583
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
libsodium@1.0.20-r0
pynacl@1.6.0
1.0.20-r1
1.6.2

Open the chart page →

4,749
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

11,061
binaryvision-tlophntom0.0.41 of 1See more

binaryvision-tlo phntom 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
phntom/binaryvision-tlo-static:0.0.4e8b9ac93a3dd
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

1,277
libretimepodzone-chartsVerified publisher0.4.13 of 9See more

libretime podzone-charts 0.4.1

3 of the 9 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
libsodium@1.0.18-1
1.0.18-1+deb11u1
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
libsodium@1.0.18-1
1.0.18-1+deb11u1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

11,149
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

28,484
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

5,203
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pynacl@1.4.0
1.6.2

Open the chart page →

6,668
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
pynacl@1.6.0
1.6.2

Open the chart page →

4,272
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
pynacl@1.5.0
1.6.2

Open the chart page →

21,211
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
pynacl@1.5.0
1.6.2

Open the chart page →

5,269
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

6,026
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

1,529
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
pynacl@1.5.0
1.6.2

Open the chart page →

9,256
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

5,683
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

12,949
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

5,338
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1

Open the chart page →

10,605
recipyartomik-helm-chartsVerified publisher0.0.21 of 2See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
reaper99/recipya:v1.2.27f7ec3aeb88c
libsodium@1.0.20-r0
1.0.20-r1

Open the chart page →

2,066
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

8,619
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
pynacl@1.5.0
1.6.2

Open the chart page →

10,209
mysqlsb-helm-charts0.4.01 of 1See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:8.4.3106d5197fd8e
pynacl@1.5.0
1.6.2

Open the chart page →

1,096
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
libsodium@1.0.18-1+b2
1.0.18-1+deb13u1

Open the chart page →

9,755
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
pynacl@1.5.0
1.6.2

Open the chart page →

1,713
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
libsodium@1.0.18-1
paragonie/sodium_compat@v1.19.0
1.0.18-1+deb12u1
1.24.0

Open the chart page →

5,315
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

13,510
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
libsodium@1.0.18-1build3
paragonie/sodium_compat@v1.21.1
1.0.18-1ubuntu0.24.04.1
1.24.0

Open the chart page →

6,094
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:9.0.192dc86967801
pynacl@1.5.0
1.6.2

Open the chart page →

5,497
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
libsodium@1.0.8-5
no fix listed

Open the chart page →

23,007
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
pynacl@1.5.0
1.6.2

Open the chart page →

3,337
moksi-gitops0.16.41 of 2See more

mok si-gitops 0.16.4

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
libsodium@1.0.19-r0
1.0.19-r1

Open the chart page →

664
phpmyadminsitepilot1.0.11 of 1See more

phpmyadmin sitepilot 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.138437e021deb
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

1,724
sneakerssneakers1.0.02 of 4See more

sneakers sneakers 1.0.0

2 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
pynacl@1.4.0
1.6.2
helga09/php_shoes_ukr:v1.1.1e283539bcb8c
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

7,574
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
pynacl@1.3.0
1.6.2

Open the chart page →

2,060
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsodium@1.0.18-1build3
1.0.18-1ubuntu0.24.04.1

Open the chart page →

12,460
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsodium@1.0.18-1
1.0.18-1+deb12u1

Open the chart page →

33,583
convert-datasvtechVerified publisher0.13.21 of 3See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

7,588
daloradiussvtech-public-helm-charts1.0.01 of 1See more

daloradius svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
ptthanh1511/daloradius:1.2-devafecc5143fcb
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

718
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
libsodium@1.0.18-1build2
1.0.18-1ubuntu0.22.04.1

Open the chart page →

12,048
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
pynacl@1.4.0
1.6.2

Open the chart page →

12,655
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
pynacl@1.5.0
1.6.2

Open the chart page →

5,511
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-69277.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
libsodium@1.0.18-1
1.0.18-1+deb11u1

Open the chart page →

2,038

Container images carrying it

301 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
libsodium@1.0.19-r0
1.0.19-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.