vaultwarden
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Vaultwarden has 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement | vaultwarden | Rust / Cargo | Medium | Fix reported | |
| Vaultwarden's Collection Management Operations Allowed Without `manage` Verification for Manager Role | vaultwarden | Rust / Cargo | High | Fix reported | |
| Vaultwarden has Unauthorized Access via Partial Update API on Another User’s Cipher | vaultwarden | Rust / Cargo | Medium | Fix reported | |
| Vaultwarden has Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager | vaultwarden | Rust / Cargo | High | Fix reported | |
| Vaultwarden vulnerable to user impersonation | vaultwarden | Rust / Cargo | High | Fix reported | |
| Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability | vaultwarden | Rust / Cargo | Low | Fix reported | |
| Vaultwarden HTML injection vulnerability | vaultwarden | Rust / Cargo | Low | Fix reported |