Skip to content
OpenAdvisories

Package · Hex

altcha

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2025-68113

    ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

    ALTCHA is privacy-first software for captcha and bot protection. A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters …

    altcha-org altcha-lib altcha altcha-lib npm Packagist Maven PyPI Go RubyGems Hex