halite

Halite Halite es una interfaz de criptografía de alto nivel que depende de libsodium para todas sus operaciones criptográficas subyacentes. Halite fue creado por Paragon Initiative Enterprises como resultado de nuestros continuos esfuerzos por mejorar el ecosistema y hacer que la criptografía en...

libsodium

Sodium is an easy-to-use software library that provides a wide range of cryptographic operations including encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable, installable, and packageable fork of NaCl. While maintaining API compatibility,...

libsodium

Sodium 是一个易于使用的软件库，提供了广泛的加密操作，包括加密、解密、数字签名和安全密码哈希。 它是 NaCl 的一个可移植、可交叉编译、可安装、可打包的分支。在保持 API 兼容性的同时，libsodium 扩展了功能，以提高可用性并简化安全应用程序的开发。 主要特性 加密与解密： 使用现代算法安全地加密和解密数据。 数字签名： 创建和验证签名，确保数据真实性。 跨平台兼容性： 支持 Windows（MinGW 和 Visual Studio，x86、x64 和 arm64）、iOS、Android、JavaScript 和 WebAssembly。 用户友好的 API：...

CipherGist

如果您觉得这个 GitHub 仓库有用，请考虑给它一个星标！⭐️ 🛡️ CipherGist - 通过 GitHub Gist 实现端到端加密消息传递 CipherGist 是一个轻量级、安全、开源的加密信使，利用 GitHub Gist 作为后端实现私密通信。它采用 NaCl libsodium 进行最先进的加密，确保只有预期的接收者才能解密您的消息。没有中心化服务器，没有元数据跟踪——只有纯加密消息传递。 ✨ 特性 ✅ 端到端加密 – 使用 Ed25519 签名 和 X25519 加密 实现安全通信。 ✅ 无中心服务器 – 消息通过 GitHub Gist 存储和交换。 ✅ 自销毁密钥...

Klip

Klip 极简终端密码管理器。 功能 · 安装 · 使用 · 安全 功能 完全离线 运行。 安全 加密：使用 Argon2id 进行密钥派生，并利用 libsodium 进行认证加密。 安全的密码生成器。 无需外部库的自定义 TUI。 安装 AppImage 从 发布 下载 AppImage 并运行： root@kitploit: chmod +x klip-x8664.appimage ./klip-x8664.appimage 从源码构建 依赖项 ： libsodium 安装 ： root@kitploit: git clone...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

dnscrypt-autoinstall

dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...

PYSEC-2026-3002 libsodium has Incomplete List of Disallowed Inputs

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. This advisoory...

MGASA-2026-0240 Updated vim packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Arbitrary Code Execution via Python Omni-Completion in Vim 9.1.1783 && Vim = 9.2.0320 && Vim 9.2.0679. CVE-2026-57454 Out-of-bounds Write in SOFO Soundfolding in Vim 9.2.0698. CVE-2026-57455 Arbitrary Code Execution via Python Omni-Completion...

PYSEC-2026-1448 libsodium has Incomplete List of Disallowed Inputs

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. This advisoory...

Vim: Out-of-bounds Read with libsodium-encrypted Files

...

vim: Vim: Out-of-bounds Read with libsodium-encrypted Files

A flaw was found in Vim, an open source command-line text editor. When opening a specially crafted encrypted file using the VimCrypt04! or VimCrypt05! methods, an attacker could trigger an unsigned length calculation error. This issue leads to an out-of-bounds read, causing Vim to crash and...

CVE-2026-57452

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method xchacha20poly1305, requires the +sodium feature whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflo...

CVE-2026-57452

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method xchacha20poly1305, requires the +sodium feature whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflo...

CVE-2026-57452 Vim: Out-of-bounds Read with libsodium-encrypted Files

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method xchacha20poly1305, requires the +sodium feature whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflo...

CVE-2026-57452

Vim (affected: Vim 9.2.x prior to 9.2.0671) is vulnerable when opening files encrypted with VimCrypt~04!/VimCrypt~05! using the libsodium secretstream path, where an unsigned length underflow for bodies shorter than a secretstream header causes a decryption call to read past the input buffer, cra...

CVE-2026-57452 Vim: Out-of-bounds Read with libsodium-encrypted Files

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method xchacha20poly1305, requires the +sodium feature whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflo...

CVE-2026-57452

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method xchacha20poly1305, requires the +sodium feature whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflo...

PT-2026-52477

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0671 Description When opening a file encrypted using the VimCrypt04! or VimCrypt05! methods which utilize xchacha20poly1305 and require the +sodium feature, an unsigned length calculation underflows if the file body i...

EulerOS Virtualization 2.13.0 : libsodium (EulerOS-SA-2026-2175)

According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...