LOWcrates.io
GHSA-g5x8-v2ch-gj2g· CVE-2024-55224Vaultwarden HTML injection vulnerability
Modified: 1/9/2025
package
pkg:crates.io/vaultwarden
Vaultwarden HTML injection vulnerability
Modified: 1/9/2025
Vaultwarden's Collection Management Operations Allowed Without `manage` Verification for Manager Role
Modified: 3/4/2026
Vaultwarden has Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager
Modified: 3/4/2026
Vaultwarden has 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement
Modified: 3/5/2026
Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability
Modified: 1/9/2025
Vaultwarden has Unauthorized Access via Partial Update API on Another User’s Cipher
Modified: 3/4/2026
Vaultwarden vulnerable to user impersonation
Modified: 1/10/2025