Rust advisories / crate
Security history · vaultwarden · data from Oct 24, 2026
Is vaultwarden safe to use? Its security history
VerdictNo open advisories. 7 past vulnerabilities were fixed.
7advisories on record
7vulnerabilities
0unmaintained notices
nonenewest fixed version
Every advisory, newest first
- VulnerabilityGHSA-w9f8-m526-h7fh · 2026-03-04Vaultwarden has Unauthorized Access via Partial Update API on Another User’s Cipher
- VulnerabilityGHSA-h4hq-rgvh-wh27 · 2026-03-04Vaultwarden's Collection Management Operations Allowed Without `manage` Verification for Manager Role
- VulnerabilityGHSA-r32r-j5jq-3w4m · 2026-03-04Vaultwarden has Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager
- VulnerabilityGHSA-v6pg-v89r-w8wr · 2026-03-04Vaultwarden has 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement
- VulnerabilityGHSA-g5x8-v2ch-gj2g · 2025-01-09Vaultwarden HTML injection vulnerability
- VulnerabilityGHSA-vprm-27pv-jp3w · 2025-01-09Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability
- VulnerabilityGHSA-x7m9-mv49-fv73 · 2025-01-09Vaultwarden vulnerable to user impersonation
Check your version
Run cargo tree -i vaultwarden to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?