Product by Open Source

    Vaultwarden

    6 known vulnerabilities in Vaultwarden (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Vaultwarden (Open Source)
    MediumCVE-2025-24898

    rust openssl ssl::select_next_proto use after free

    also in 2 other products

    		—
    HighCVE-2026-47164

    Dani-garcia Vaultwarden: Improper Access Control

    also in 1 other product

    		7.7
    MediumCVE-2026-47159

    Dani-garcia Vaultwarden: Improper Authentication

    also in 1 other product

    		—
    MediumCVE-2026-116678

    Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs

    also in 1 other product

    		5.8
    HighCVE-2026-47158

    Vaultwarden: CSRF in SSO Authorization Flow

    also in 1 other product

    		8.3
    MediumCVE-2026-47160

    Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass

    also in 1 other product

    		5.8

    All products by Open Source