CVE-2025-63289

Critical · 9.1

CVSS

9.1

EPSS

0.2%

Published

Nov 12, 2025

CISA due date

—

The record

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryption_helper.dart file

Affected packages

Ecosystem	Package	Introduced	Fixed