Skip to content
OpenAdvisories

Vendor

aliasvault

5 known vulnerabilities.

Products

aliasvault 5 ghcr.io/aliasvault/aliasvault 1 ghcr.io/aliasvault/api 1 ghcr.io/lanedirt/aliasvault-api 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-55587

    AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID

    AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier m…

    aliasvault aliasvault
  • High 7.7
    CVE-2025-59344

    AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction

    AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery (SSRF) vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, pa…

    aliasvault aliasvault