—
GO-2026-5487
HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service in github.com/hashicorp/vault
Details
HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service in github.com/hashicorp/vault
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/hashicorp/vault
Introduced in:
0.10.0 No fixed version published yet for github.com/hashicorp/vault (go modules). Pin to a known-safe version or switch to an alternative.