tocsin

CVE-2025-68113

7 advisories.

npm/altcha-lib CVE-2025-68113: medium 6.5, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Action: Upgrade altcha-lib to 1.4.1 or later.

npm i altcha-lib@1.4.1

Affected

introducedfixedlast affected
01.4.1-

Fixed versions

1.4.1

Sources

CVE-2025-68113 · published · modified · JSON

Packagist/altcha-org/altcha CVE-2025-68113: medium 6.5, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Action: Upgrade altcha-org/altcha to 1.3.1 or later.

composer require altcha-org/altcha:1.3.1

Affected

introducedfixedlast affected
01.3.1-

Fixed versions

1.3.1

Sources

CVE-2025-68113 · published · modified · JSON

Go/github.com/altcha-org/altcha-lib-go CVE-2025-68113: medium 6.5, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Action: Upgrade github.com/altcha-org/altcha-lib-go to 1.0.0 or later.

go get github.com/altcha-org/altcha-lib-go@v1.0.0

Affected

introducedfixedlast affected
01.0.0-

Fixed versions

1.0.0

Sources

CVE-2025-68113 · published · modified · JSON

RubyGems/altcha CVE-2025-68113: medium 6.5, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Action: Upgrade altcha to 1.0.0 or later.

bundle update altcha

Affected

introducedfixedlast affected
01.0.0-

Fixed versions

1.0.0

Sources

CVE-2025-68113 · published · modified · JSON

PyPI/altcha CVE-2025-68113: medium 6.5, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Action: Upgrade altcha to 1.0.0 or later.

pip install altcha==1.0.0

Affected

introducedfixedlast affected
01.0.0-

Fixed versions

1.0.0

Sources

CVE-2025-68113 · published · modified · JSON

Go/github.com/altcha-org/altcha-lib-go CVE-2025-68113: unknown, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay in github.com/altcha-org/altcha-lib-go

Action: Upgrade github.com/altcha-org/altcha-lib-go to 1.0.0 or later.

go get github.com/altcha-org/altcha-lib-go@v1.0.0

Affected

introducedfixedlast affected
01.0.0-

Fixed versions

1.0.0

Sources

CVE-2025-68113 · published · modified · JSON

PyPI/altcha CVE-2025-68113: medium 6.5, EPSS 0.46%

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Action: Upgrade altcha to 1.0.0 or later.

pip install altcha==1.0.0

Affected

introducedfixedlast affected
01.0.0-

Fixed versions

1.0.0

Sources

CVE-2025-68113 · published · modified · JSON