Libsodium’s First Vulnerability, Ever - Threat Wire

This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).

Libsodium, a trusted encryption library with 13 years of vulnerability-free operation, disclosed its first CVE (CVE-2025-69277) on December 30th, 2025. The bug involves a missing check in elliptic curve point validation for Edwards25519, where invalid points were sometimes accepted. The creator discovered the flaw while

9m watch time

Sort: