Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-5487
  • Go/github.com/hashicorp/vault
 HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service in github.com/hashicorp/vault 25 Jun
  • No fix available
GO-2026-5199
  • Go/github.com/hashicorp/vault
 HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization in github.com/hashicorp/vault 25 Jun
  • No fix available
GO-2026-5247
  • Go/github.com/hashicorp/vault
 HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations in github.com/hashicorp/vault 25 Jun
  • No fix available
GO-2026-5262
  • Go/github.com/hashicorp/vault
 HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS in github.com/hashicorp/vault 25 Jun
  • No fix available
GHSA-88v5-9hxc-f85r
  • Go/github.com/hashicorp/vault
 HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations 17 Apr
  • No fix available
  • Severity - 7.5 (High)
GHSA-72gw-fmmr-c4r4
  • Go/github.com/hashicorp/vault
 HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization 17 Apr
  • No fix available
  • Severity - 7.5 (High)
GHSA-8r5m-3f66-qpr3
  • Go/github.com/hashicorp/vault
 HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS 17 Apr
  • No fix available
  • Severity - 5.3 (Medium)
GHSA-m2w4-8ggf-rj47
  • Go/github.com/hashicorp/vault
 HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service 17 Apr
  • No fix available
  • Severity - 8.1 (High)
GO-2025-4070
  • Go/github.com/hashicorp/vault
 HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass in github.com/hashicorp/vault 30 Oct 2025
  • Fix available
GO-2025-4071
  • Go/github.com/hashicorp/vault
 Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON in github.com/hashicorp/vault 30 Oct 2025
  • Fix available
GHSA-vp5w-xcfc-73wf
  • Go/github.com/hashicorp/vault
 Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON 23 Oct 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-9g4h-h484-3578
  • Go/github.com/hashicorp/vault
 HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass 23 Oct 2025
  • Fix available
  • Severity - 8.1 (High)
GO-2025-3924
  • Go/github.com/hashicorp/vault
 HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads in github.com/hashicorp/vault 08 Sep 2025
  • Fix available
GHSA-8f82-53h8-2p34
  • Go/github.com/hashicorp/vault
 HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads 28 Aug 2025
  • Fix available
  • Severity - 7.5 (High)
GO-2025-3836
  • Go/github.com/hashicorp/vault
 Hashicorp Vault has Incorrect Validation for Non-CA Certificates in github.com/hashicorp/vault 11 Aug 2025
  • Fix available
GO-2025-3837
  • Go/github.com/hashicorp/vault
 Hashicorp Vault has Privilege Escalation Vulnerability in github.com/hashicorp/vault 11 Aug 2025
  • Fix available
Load more...