Read the docs

libsodium

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

libsodium records in CISA KEV

No libsodium vulnerabilities are listed in CISA KEV.

Records

1 record

Priority LOW 20

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it som…

CVSS 3.1MEDIUM 4.5 Local No auth No interaction EPSS 0.00182 Published 2025-12-31 Partial fix · 2.5.0, 1.24.0 +2 CWE-184
Open these records in search →