Incorrect Ed25519 public key validation

PKSA-32g2-byr9-drtw

Affected version: >=2,<2.5.1|<1.24.1

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] libsodium has Incomplete List of Disallowed Inputs

PKSA-bjyb-w14t-61js CVE-2025-69277 GHSA-mrfv-m5wm-5w6w

Affected version: <1.24.0|>=2,<2.5.0

Reported by:
GitHub

Missing check that a point is on the prime subgroup for Edwards25519

PKSA-8x19-j2j3-bn67

Affected version: >=2,<2.5.0|<1.24.0

Reported by:
FriendsOfPHP/security-advisories