Security Advisories for github.com/hashicorp/vault in go
High
6 months ago
HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations
go
github.com/hashicorp/vault
High
6 months ago
HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service
go
github.com/hashicorp/vault
High
6 months ago
HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization
go
github.com/hashicorp/vault
Moderate
6 months ago
HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
go
github.com/hashicorp/vault
High
12 months ago
Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON
go
github.com/hashicorp/vault
High
12 months ago
HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass
go
github.com/hashicorp/vault
High
about 1 year ago
HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads
go
github.com/hashicorp/vault
Moderate
about 1 year ago
HashiCorp Vault ldap auth method may not have correctly enforced MFA
go
github.com/hashicorp/vault
Moderate
about 1 year ago
Hashicorp Vault has Incorrect Validation for Non-CA Certificates
go
github.com/hashicorp/vault
Critical
about 1 year ago
Hashicorp Vault has Code Execution Vulnerability via Plugin Configuration
go
github.com/hashicorp/vault
High
about 1 year ago
Hashicorp Vault has Privilege Escalation Vulnerability
go
github.com/hashicorp/vault
Moderate
about 1 year ago
Hashicorp Vault has Lockout Feature Authentication Bypass
go
github.com/hashicorp/vault
Low
about 1 year ago
Hashicorp Vault has an Observable Discrepancy on Existing and Non-Existing Users
go
github.com/hashicorp/vault
Moderate
about 1 year ago
Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse
go
github.com/hashicorp/vault
Moderate
about 1 year ago
Hashicorp Vault has Login MFA Rate Limit Bypass Vulnerability
go
github.com/hashicorp/vault
Low
over 1 year ago
Vault Community Edition rekey and recovery key operations can cause denial of service
go
github.com/hashicorp/vault
Moderate
over 1 year ago
Hashicorp Vault Community vulnerable to Incorrect Authorization
go
github.com/hashicorp/vault
Moderate
over 1 year ago
Hashicorp Vault Community vulnerable to Generation of Error Message Containing Sensitive Information
go
github.com/hashicorp/vault
High
almost 2 years ago
Hashicorp Vault vulnerable to denial of service through memory exhaustion
go
github.com/openbao/openbao, github.com/hashicorp/vault
High
about 2 years ago
Vault Community Edition privilege escalation vulnerability
go
github.com/openbao/openbao, github.com/hashicorp/vault
High
about 2 years ago
Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default
go
github.com/openbao/openbao, github.com/hashicorp/vault
Moderate
about 2 years ago
Vault Leaks Client Token and Token Accessor in Audit Devices
go
github.com/hashicorp/vault
High
over 2 years ago
Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions
go
github.com/hashicorp/vault
Low
over 2 years ago
HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims
go
github.com/hashicorp/vault
Moderate
over 2 years ago
HashiCorpVault does not correctly validate OCSP responses
go
github.com/hashicorp/vault
Moderate
over 2 years ago
Hashicorp Vault may expose sensitive log information
go
github.com/hashicorp/vault
Moderate
over 2 years ago
HashiCorp Vault Improper Privilege Management
go
github.com/hashicorp/vault
Critical
over 2 years ago
HashiCorp Vault Improper Privilege Management
go
github.com/hashicorp/vault
High
almost 3 years ago
HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability
go
github.com/hashicorp/vault
High
about 3 years ago
Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability
go
github.com/hashicorp/vault
Moderate
about 3 years ago
HashiCorp Vault Improper Input Validation vulnerability
go
github.com/hashicorp/vault
Moderate
about 3 years ago
HashiCorp Vault and Vault Enterprise vulnerable to user enumeration
go
github.com/hashicorp/vault
High
over 3 years ago
Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation
go
github.com/hashicorp/vault
Moderate
over 3 years ago
HashiCorp Vault's revocation list not respected
go
github.com/hashicorp/vault
Moderate
over 3 years ago
Hashicorp Vault vulnerable to Cross-site Scripting
go
github.com/hashicorp/vault
Moderate
over 3 years ago
HashiCorp Vault's PKI mount vulnerable to denial of service
go
github.com/hashicorp/vault
Moderate
over 3 years ago
HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File
go
github.com/hashicorp/vault
Moderate
over 3 years ago
HashiCorp Vault's implementation of Shamir's secret sharing vulnerable to cache-timing attacks
go
github.com/hashicorp/vault
Critical
about 4 years ago
HashiCorp Vault vulnerable to incorrect metadata access
go
github.com/hashicorp/vault
Critical
over 4 years ago
Token leases could outlive their TTL in HashiCorp Vault
go
github.com/hashicorp/vault
Moderate
over 4 years ago
HashiCorp Vault improper configuration of multi factor authentication
go
github.com/hashicorp/vault
Critical
almost 5 years ago
HashiCorp Vault Incorrect Permission Assignment for Critical Resource
go
github.com/hashicorp/vault
High
about 5 years ago
Incorrect Privilege Assignment in HashiCorp Vault
go
github.com/hashicorp/vault
Low
about 5 years ago
Hashicorp Vault Privilege Escalation Vulnerability
go
github.com/hashicorp/vault
Critical
about 5 years ago
HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0
go
github.com/hashicorp/vault
Moderate
about 5 years ago
Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault
go
github.com/hashicorp/vault
High
about 5 years ago
Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault
go
github.com/hashicorp/vault
High
about 5 years ago
Improper Resource Shutdown or Release in HashiCorp Vault
go
github.com/hashicorp/vault