Skip to content
OpenAdvisories

Product · bitwarden

server

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2026-57522

    Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates

    Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an e…

    bitwarden server