{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.8.0","last_affected":"2.2.4"}],"component":"altcha","cve_ids":["CVE-2025-65849"],"ecosystem":"npm","epss":0.0022,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mpmc-qchh-r9q8","id":"tcs_01M5KG1BWQY5YVH9DGKFXPWR2T","modified_at":"2025-12-12T20:08:03.446058Z","published_at":"2025-12-08T21:30:22Z","references":["https://osv.dev/vulnerability/GHSA-mpmc-qchh-r9q8","https://nvd.nist.gov/vuln/detail/CVE-2025-65849","https://altcha.org/docs/v2/obfuscation","https://github.com/altcha-org/altcha","https://github.com/altcha-org/altcha/blob/154f874cbcdd4e639783463130d13988a2bd1bdc/src/helpers.ts#L170-L194","https://github.com/eternal-flame-AD/altcha-deobfs"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-mpmc-qchh-r9q8","url":"https://osv.dev/vulnerability/GHSA-mpmc-qchh-r9q8"},{"source":"nvd","source_id":"CVE-2025-65849","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65849"}],"summary":"Altcha Proof-of-Work obfuscation mode cryptanalytic break"}