RubyGems/altcha CVE-2025-68113: medium 6.5, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Action: Upgrade altcha to 1.0.0 or later.

bundle update altcha

Affected

Fixed versions

Sources

• osv: GHSA-6gvq-jcmp-8959#RubyGems/altcha
• https://github.com/altcha-org/altcha-lib/security/advisories/GHSA-6gvq-jcmp-8959
• https://nvd.nist.gov/vuln/detail/CVE-2025-68113
• https://github.com/altcha-org/altcha-lib-ex/commit/09b2bad466ad0338a5b24245380950ea9918333e
• https://github.com/altcha-org/altcha-lib-go/commit/4a5610745ef79895a67bac858b2e4f291c2614b8
• https://github.com/altcha-org/altcha-lib-java/commit/69277651fdd6418ae10bf3a088901506f9c62114
• https://github.com/altcha-org/altcha-lib-php/commit/9e9e70c864a9db960d071c77c778be0c9ff1a4d0
• https://github.com/altcha-org/altcha-lib-rb/commit/4fd7b64cbbfc713f3ca4e066c2dd466e3b8d359b
• https://github.com/altcha-org/altcha-lib/commit/cb95d83a8d08e273b6be15e48988e7eaf60d5c08
• https://github.com/altcha-org/altcha-lib
• https://github.com/altcha-org/altcha-lib-java/releases/tag/v1.3.0
• https://github.com/altcha-org/altcha-lib-php/releases/tag/v1.3.1
• https://github.com/altcha-org/altcha-lib/releases/tag/1.4.1
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/altcha/CVE-2025-68113.yml

CVE-2025-68113 · published 2025-12-16T00:43:52Z · modified 2026-09-10T03:50:31.591423196Z · JSON