Skip to content
OpenAdvisories

Vendor

altcha-org

1 known vulnerabilities.

Products

altcha-lib 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-68113

    ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

    ALTCHA is privacy-first software for captcha and bot protection. A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters …

    altcha-org altcha-lib altcha altcha-lib npm Packagist Maven PyPI Go RubyGems Hex