vaultwarden vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-27898Mediumvaultwarden: Vaultwarden has Unauthorized Access via Partial Update API on Another User’s Cipher CVE-2026-27803Highvaultwarden: Vaultwarden's Collection Management Operations Allowed Without `manage` Verification for Manager…CVE-2026-27802Highvaultwarden: Vaultwarden has Privilege Escalation via Bulk Permission Update to Unauthorized Collections by…CVE-2026-27801Mediumvaultwarden: Vaultwarden has 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement CVE-2024-55226Lowvaultwarden: Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability CVE-2024-55225Highvaultwarden: Vaultwarden vulnerable to user impersonation CVE-2024-55224Lowvaultwarden: Vaultwarden HTML injection vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo