crates.io/vaultwarden

Vaultwarden HTML injection vulnerability

Modified: 1/9/2025

Vaultwarden's Collection Management Operations Allowed Without `manage` Verification for Manager Role

Modified: 3/4/2026

Vaultwarden has Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager

Modified: 3/4/2026

Vaultwarden has 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement

Modified: 3/5/2026

Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability

Modified: 1/9/2025

Vaultwarden has Unauthorized Access via Partial Update API on Another User’s Cipher

Modified: 3/4/2026

Vaultwarden vulnerable to user impersonation

Modified: 1/10/2025