vaultwarden
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 13, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass
Vaultwarden: Brute-force protection bypass vulnerability
Vaultwarden: Unconfirmed Owner Can Purge Entire Organization Vault
Vaultwarden: Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization
Vaultwarden: Refresh tokens not invalidated on security stamp rotation
Vaultwarden missing authorization check allows Manager-role users to enumerate all collections
Vaultwarden WebAuthn credential metadata tampered before signature verification
vaultwarden allows escalation of privilege via variable confusion in OrgHeaders trait
vaultwarden allows RCE in the admin panel
Monitor vaultwarden in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.