Skip to content
OpenAdvisories

Vendor

kyndryl-open-source

2 known vulnerabilities.

Products

hashi-vault-js 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-55100

    hashi-vault-js has a path traversal and query parameter injection

    hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of usi…

    kyndryl-open-source hashi-vault-js hashi-vault-js npm