Skip to content
OpenAdvisories

Package · crates.io

vaultwarden

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-27898

    Vaultwarden: Unauthorized Access via Partial Update API on Another User’s Cipher

    Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, an authenticated regular user can specify another user’s cipher_id and call "PUT /api/ciphers/{id}/partial" Even though the stan…

    dani-garcia vaultwarden vaultwarden crates.io
  • Medium 6.0
    CVE-2026-27801

    Vaultwarden: 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement

    Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Vaultwarden versions 1.34.3 and prior are susceptible to a 2FA bypass when performing protected actions. An attacker who gains authenticated access to a …

    dani-garcia vaultwarden vaultwarden crates.io
  • Medium 5.4
    CVE-2024-55226

    Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability

    Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting (XSS) vulnerability via the component /api/core/mod.rs.

    vaultwarden crates.io