pkg:crates.io/vaultwarden

共 7 筆 CVEHIGH2MEDIUM1

✅ 檢查你的版本

所有已知漏洞

  • HIGH8.3CVE-2026-27803Vaultwarden's Collection Management Operations Allowed Without `manage` Verification for Manager Role
    from 0, < 1.35.4
  • HIGH8.3CVE-2026-27802Vaultwarden has Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager
    from 0, < 1.35.4
  • MEDIUM5.4CVE-2026-27898Vaultwarden has Unauthorized Access via Partial Update API on Another User’s Cipher
    from 0, < 1.35.4
  • —CVE-2026-27801Vaultwarden has 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement
    from 0, < 1.35.0
  • —CVE-2024-55226Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability
    from 0, < 1.32.5
  • —CVE-2024-55224Vaultwarden HTML injection vulnerability
    from 0, < 1.32.5
  • —CVE-2024-55225Vaultwarden vulnerable to user impersonation
    from 0, < 1.32.5