{"action":"Upgrade altcha to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"altcha","cve_ids":["CVE-2025-68113"],"ecosystem":"PyPI","epss":0.00463,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-6gvq-jcmp-8959","id":"tcs_01M5KGQNS7MS5BHGQ08X6CAT4Y","modified_at":"2026-07-07T17:56:08.392027300Z","published_at":"2026-07-07T16:03:12.971333Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1115","https://github.com/altcha-org/altcha-lib/security/advisories/GHSA-6gvq-jcmp-8959","https://nvd.nist.gov/vuln/detail/CVE-2025-68113","https://github.com/altcha-org/altcha-lib-ex/commit/09b2bad466ad0338a5b24245380950ea9918333e","https://github.com/altcha-org/altcha-lib-go/commit/4a5610745ef79895a67bac858b2e4f291c2614b8","https://github.com/altcha-org/altcha-lib-java/commit/69277651fdd6418ae10bf3a088901506f9c62114","https://github.com/altcha-org/altcha-lib-php/commit/9e9e70c864a9db960d071c77c778be0c9ff1a4d0","https://github.com/altcha-org/altcha-lib-rb/commit/4fd7b64cbbfc713f3ca4e066c2dd466e3b8d359b","https://github.com/altcha-org/altcha-lib/commit/cb95d83a8d08e273b6be15e48988e7eaf60d5c08","https://github.com/altcha-org/altcha-lib","https://github.com/altcha-org/altcha-lib-java/releases/tag/v1.3.0","https://github.com/altcha-org/altcha-lib-php/releases/tag/v1.3.1","https://github.com/altcha-org/altcha-lib/releases/tag/1.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/altcha/CVE-2025-68113.yml","https://pypi.org/project/altcha","https://github.com/advisories/GHSA-6gvq-jcmp-8959"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1115","url":"https://osv.dev/vulnerability/PYSEC-2026-1115"}],"summary":"ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay"}