Skip to content
OpenAdvisories

Product · jopenlibs

vault-java-driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-109408

    vault-java-driver: SslConfig silently disables requested TLS verification

    vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three states where the caller asked for verification: an SslConfig passed to VaultConfig without calling build(), an SslConfig restored by Jav…

    jopenlibs vault-java-driver