Description
An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | vaultwarden | < 1.32.5 | 1.32.5 | GHSA-g5x8-v2ch-gj2g |
Advisories 1
- WID-SEC-2025-0042 Vaultwarden: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 21, 2025