Known vulnerabilities in php-sodium

Vendor: OpenAnolis
Software: php-sodium
Software CPE: cpe:2.3:o:openanolis:php-sodium:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 25
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php-sodium php-sodium is affected by 25 known vulnerabilities: 2 critical, 5 high, 16 medium, 2 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137286 - Memory corruption
CVE-2026-14355		 CWE-119 Medium
No
No
 8.3.33-1 09.07.2026 SB2026070955
SB2026070956
SB2026071356
and 17 more
#VU130909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-6735		 CWE-79 Medium
No
No
 8.3.31-1 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 19 more
#VU130915 - NULL Pointer Dereference
CVE-2026-7262		 CWE-476 Medium
No
No
 8.3.31-1 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 20 more
#VU130916 - Integer overflow
CVE-2026-7568		 CWE-190 Medium
No
No
 8.3.31-1 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 20 more
#VU120272 - Missing release of memory after effective lifetime
CVE-2025-14177		 CWE-401 Medium
Available
No
 8.3.29-1 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 20 more
#VU120271 - Heap-based Buffer Overflow
CVE-2025-14178		 CWE-122 High
No
No
 8.3.19-3 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 33 more
#VU120270 - NULL Pointer Dereference
CVE-2025-14180		 CWE-476 Medium
No
No
 8.3.19-3 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 18 more
#VU112190 - Server-Side Request Forgery (SSRF)
CVE-2025-1220		 CWE-918 Medium
No
No
 8.3.29-1 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 16 more
#VU112189 - NULL Pointer Dereference
CVE-2025-6491		 CWE-476 Medium
No
No
 8.3.19-2 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 18 more
#VU112187 - Error Handling
CVE-2025-1735		 CWE-388 Medium
No
No
 8.3.19-2 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 17 more
#VU100674 - Buffer over-read
CVE-2024-11233		 CWE-126 Medium
No
No
 8.2.27-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 16 more
#VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-11234		 CWE-93 Medium
No
No
 8.2.27-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100671 - Buffer over-read
CVE-2024-8929		 CWE-126 Medium
No
No
 8.2.27-1 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU97746 - Security Features
CVE-2024-8927		 CWE-254 Medium
No
No
 8.2.24-1 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU97691 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-8926		 CWE-78 High
Available
No
 8.2.24-1 25.09.2024 SB2024092519
SB2024092520
SB2024092524
and 7 more
#VU91109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-5585		 CWE-78 Medium
No
No
 8.2.20-1 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 8 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577		 CWE-78 Critical
Available
Exploited
 8.2.24-1 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU88484 - Improper Authentication
CVE-2024-3096		 CWE-287 High
No
No
 8.2.20-1 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 25 more
#VU88482 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-1874		 CWE-78 Medium
Available
No
 8.2.20-1 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 7 more
#VU67756 - Security Features
CVE-2022-31629		 CWE-254 Low
Available
No
 8.2.20-1 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more


Showing elements 1 - 20 out of 25