Advisories for packages from paragonie

Listing reported advisories for packages from paragonie sorted by their report date.

libsodium has Incomplete List of Disallowed Inputs
GitHub

paragonie/sodium_compat

>= 2, < 2.5.0 · < 1.24.0

2026-01-06 17:12:26
Missing check that a point is on the prime subgroup for Edwards25519
FriendsOfPHP

paragonie/sodium_compat

>=2, <2.5.0 · <1.24.0

2025-12-30 00:00:00
random_compat Uses insecure CSPRNG
GitHub

paragonie/random_compat

< 2.0

2024-05-17 23:27:21
mdanter/ecc affected by timing vulnerability in cryptographic side-channels
GitHub

paragonie/ecc

>= 0, < 2.0.1 · <= 1.0.0

2024-05-10 21:49:13
mdanter/ecc affected by timing vulnerability in cryptographic side-channels
FriendsOfPHP

paragonie/ecc

>=2, <2.0.1

2024-04-24 12:02:00
Uses insecure CSPRNG (openssl_random_pseudo_bytes())
FriendsOfPHP

paragonie/random_compat

<2.0

2016-03-16 00:00:00

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch