Skip to content
OpenAdvisories

Package · crates.io

vaultwarden

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-55225

    Vaultwarden vulnerable to user impersonation

    An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request.

    vaultwarden crates.io
  • Critical 9.6
    CVE-2024-55224

    Vaultwarden HTML injection vulnerability

    An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message.

    vaultwarden crates.io