github.com/hashicorp/vault vulnerabilities

CVEs whose affected-version data names the github.com/hashicorp/vault package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

github.com/hashicorp/vault vulnerabilities

HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization

HashiCorp Vault ldap auth method may not have correctly enforced MFA

Hashicorp Vault has Privilege Escalation Vulnerability

Hashicorp Vault has Incorrect Validation for Non-CA Certificates

Hashicorp Vault Community vulnerable to Generation of Error Message Containing Sensitive Information

Hashicorp Vault vulnerable to denial of service through memory exhaustion

Vault Community Edition privilege escalation vulnerability

Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default

Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions

HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims

HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability

Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability

HashiCorp Vault Improper Input Validation vulnerability