Is there a patch available for CVE-2025-69277?

Yes, a patch is available for CVE-2025-69277. Update the affected software to the latest version immediately.

Alpine libsodium CVE-2025-69277

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:11 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

15 pypi packages depend on hdwallet (13 direct, 2 indirect)
8,552 pypi packages depend on pynacl (995 direct, 7,604 indirect)

Ecosystem-wide dependent count for version 3.6.1 and other introduced versions.

DescriptionCVE.org

Alpine Linux: libsodium fixed in 1.0.20-r1

AnalysisAI

libsodium on Alpine Linux has been patched in package version 1.0.20-r1, addressing an unspecified vulnerability reported by the Alpine Linux vendor. The nature of the underlying flaw, affected versions prior to the fix, and potential attacker impact are not described in available intelligence. Given libsodium's role as a widely used cryptographic library, any confirmed vulnerability could affect confidentiality, integrity, or availability of applications depending on it, but no concrete impact has been confirmed from current data.

Technical ContextAI

libsodium is a portable, cross-compilable cryptography library derived from NaCl, providing primitives for encryption, decryption, signatures, password hashing, and key exchange. It is commonly embedded in applications across many language ecosystems. On Alpine Linux, it is distributed as a community or main repository package. The fix is contained in Alpine package version 1.0.20-r1, suggesting the upstream libsodium version involved is 1.0.20 with an Alpine-specific patch revision. No CWE has been assigned, so the root cause class (e.g., memory safety, logic error, cryptographic weakness) is entirely unknown from available data.

Affected ProductsAI

The affected product is libsodium as packaged for Alpine Linux in versions prior to 1.0.20-r1. The exact vulnerable version range is not specified in available data. No CPE string has been provided. The fix is confirmed in Alpine Linux package libsodium 1.0.20-r1 per the Alpine vendor report. Other operating systems or upstream libsodium releases are not referenced and their status is unknown from this data.

RemediationAI

Update the Alpine Linux libsodium package to version 1.0.20-r1 or later using the Alpine package manager: 'apk upgrade libsodium'. This is the vendor-confirmed fixed version per the Alpine Linux report. No workarounds or compensating controls are described in available data. Given the unknown nature of the vulnerability, organizations with libsodium deployed on Alpine Linux should prioritize this update and monitor the Alpine Linux security advisories and the libsodium upstream changelog for additional disclosure. No advisory URL was provided in the source data.