Browse CVEs

CRITICAL 9.8 CVE-2026-43914 Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaultwarden that allows bypassing… Vaultwarden 1.35.4+ Fix from $2,3002026-05-11 HIGH 8.1 CVE-2026-43913 Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden allows an unconfirmed organization owner to purge the enti… Vaultwarden 1.35.5+ Fix from $1,9502026-05-11 HIGH 8.7 CVE-2026-43912 Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden does not enforce that a groups_users.users_organizations_u… Vaultwarden 1.35.5+ Fix from $1,9502026-05-11 HIGH 8.1 CVE-2026-43911 Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, refresh tokens are not invalidated when the user's security_stamp is r… Vaultwarden 1.35.5+ Fix from $1,9502026-05-11 MEDIUM 5.3 CVE-2026-33420 Vaultwarden is a Bitwarden-compatible server written in Rust. In version 1.35.4 and earlier, the get_org_collections_details endpoint (GET /api/organ… Vaultwarden 1.35.5+ Fix from $1,6002026-05-05 MEDIUM 5.4 CVE-2026-31835 Vaultwarden is a Bitwarden-compatible server written in Rust. In versions 1.35.4 and earlier, the WebAuthn authentication flow in `validate_webauthn_… Vaultwarden 1.35.5+ Fix from $1,6002026-05-05 HIGH 8.3 CVE-2026-27802 Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, there is a privile… Vaultwarden 1.35.4+ Fix from $1,9502026-03-04 HIGH 8.3 CVE-2026-27803 Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, when a Manager has… Vaultwarden 1.35.4+ Fix from $1,9502026-03-04 MEDIUM 5.4 CVE-2026-27898 Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, an authenticated r… Vaultwarden 1.35.4+ Fix from $1,6002026-03-04 MEDIUM 5.9 CVE-2026-27801 Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Vaultwarden versions 1.34.3 and prior are s… Vaultwarden 1.35.0+ Fix from $1,6002026-03-04 MEDIUM 6.5 CVE-2026-26012 vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization mem… Vaultwarden 1.35.3+ Fix from $1,6002026-02-11 HIGH 7.5 CVE-2025-24365 vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker can obtain owner rights of other o… Vaultwarden 1.33.0+ Fix from $1,9502025-01-27 HIGH 7.2 CVE-2025-24364 vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the v… Vaultwarden 1.33.0+ Fix from $1,9502025-01-27 CRITICAL 9.8 CVE-2024-55225 An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a … Vaultwarden 1.32.5+ Fix from $2,3002025-01-09 CRITICAL 9.6 CVE-2024-55224 An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the u… Vaultwarden 1.32.5+ Fix from $2,3002025-01-09 MEDIUM 5.4 CVE-2024-55226 Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting (XSS) vulnerability via the component /api/core/mod.rs. Vaultwarden Patch available Fix from $1,6002025-01-09 HIGH 7.5 CVE-2024-56335 vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. In affected versions an attacker is capable… Vaultwarden 1.32.7+ Fix from $1,9502024-12-20 MEDIUM 5.4 CVE-2024-39926 An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to the default CSP, HTML injection… Vaultwarden No fix yet Fix from $1,6002024-09-13 HIGH 8.8 CVE-2024-39924EPSS 13% An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization pr… Vaultwarden Mitigation only Fix from $1,9502024-09-13 MEDIUM 6.5 CVE-2024-39925 An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. It lacks an offboarding process for members who leave an organization. As a re… Vaultwarden Mitigation only Fix from $1,6002024-09-13