https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 22:55:24 +0000 https://vulnerability.circl.lu/vuln/cve-2025-69277 <p><strong>Affected:</strong> libsodium</p> <p>libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren&#39;t in the main cryptographic group.</p> <p><strong>Affected:</strong> libsodium</p> <p>libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren&#39;t in the main cryptographic group.</p> https://vulnerability.circl.lu/vuln/cve-2025-69277 https://vulnerability.circl.lu/vuln/ghsa-mrfv-m5wm-5w6w <p><strong>Affected:</strong> Packagist: paragonie/sodium_compat, PyPI: PyNaCl, PyPI: hdwallet</p> <p>libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren&#39;t in the main cryptographic group.</p> <p>This advisoory lists packages in the GitHub Advisory Database&#39;s [supported ecosystems](https://github.com/github/advisory-database?tab=readme-ov-file#supported-ecosystems) that are affected by this vulnerability due to a vulnerable dependency.</p> <p><strong>Affected:</strong> Packagist: paragonie/sodium_compat, PyPI: PyNaCl, PyPI: hdwallet</p> <p>libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren&#39;t in the main cryptographic group.</p> <p>This advisoory lists packages in the GitHub Advisory Database&#39;s [supported ecosystems](https://github.com/github/advisory-database?tab=readme-ov-file#supported-ecosystems) that are affected by this vulnerability due to a vulnerable dependency.</p> https://vulnerability.circl.lu/vuln/ghsa-mrfv-m5wm-5w6w https://vulnerability.circl.lu/vuln/pysec-2026-1448 <p><strong>Affected:</strong> PyPI: hdwallet</p> <p>libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren&#39;t in the main cryptographic group.</p> <p>This advisoory lists packages in the GitHub Advisory Database&#39;s [supported ecosystems](https://github.com/github/advisory-database?tab=readme-ov-file#supported-ecosystems) that are affected by this vulnerability due to a vulnerable dependency.</p> <p><strong>Affected:</strong> PyPI: hdwallet</p> <p>libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren&#39;t in the main cryptographic group.</p> <p>This advisoory lists packages in the GitHub Advisory Database&#39;s [supported ecosystems](https://github.com/github/advisory-database?tab=readme-ov-file#supported-ecosystems) that are affected by this vulnerability due to a vulnerable dependency.</p> https://vulnerability.circl.lu/vuln/pysec-2026-1448