vaultwarden
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 15 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 13, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs
Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass
Vaultwarden: Brute-force protection bypass vulnerability
Vaultwarden: Unconfirmed Owner Can Purge Entire Organization Vault
Vaultwarden: Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization
Vaultwarden: Refresh tokens not invalidated on security stamp rotation
Vaultwarden missing authorization check allows Manager-role users to enumerate all collections
Vaultwarden WebAuthn credential metadata tampered before signature verification
vaultwarden allows escalation of privilege via variable confusion in OrgHeaders trait
Monitor vaultwarden in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.