Skip to content
OpenAdvisories

Package · npm

hashi-vault-js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.8
    CVE-2026-55102

    hashi-vault-js: Vault token and secret values exposed in thrown errors

    hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError(), which rethrows the raw AxiosError while retaining AxiosError.config and the equ…

    kyndryl-open-source hashi-vault-js hashi-vault-js npm
  • High 8.7
    CVE-2026-55100

    hashi-vault-js has a path traversal and query parameter injection

    hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of usi…

    kyndryl-open-source hashi-vault-js hashi-vault-js npm