GHSA-wc45-m6pv-rrf9 2026-10-03 medium |  Send access limits not enforced on the new Send access endpoints | rust:vaultwarden | >1.36.0, < 1.37.0 -> 1.37.0
GHSA-jq2g-h4xr-4mcr 2026-10-03 medium | Cipher Ownership Confusion in Organization Import | rust:vaultwarden | ≤ 1.36.0 -> 1.37.0
GHSA-96f7-78q5-j345 2026-10-03 medium | Unauthenticated WebSocket connection flooding on /notifications/anonymous-hub (resource-ex | rust:vaultwarden | <= 1.36.0 -> 1.37.0
GHSA-f3qw-qg77-hmm4 2026-10-03 medium | IDOR in Organization Import Allows Unauthorized Data Injection | rust:vaultwarden | ≤ 1.36.0  -> 1.37.0
GHSA-vh5m-fc9v-m84g 2026-10-03 medium | SSRF filter bypass (regex not applied post-resolution) | rust:vaultwarden | <=1.36.0 -> 1.37.0
GHSA-xwf8-pjh7-h589 2026-10-03 medium | Cross-organization full cipher access via unguarded full-access-group query | rust:vaultwarden | <= 1.36.0 -> 1.37.0
GHSA-rxhg-2pw9-vf25 2026-10-03 medium | Send max_access_count can be exceeded by concurrent access requests | rust:vaultwarden | <= 1.36.0 -> 1.37.0
GHSA-88qc-6ch9-mc3j 2026-10-03 medium | Directory-connector member import (ldap_import) skips org-policy enforcement (check_user_a | rust:vaultwarden | <= 1.36.0 -> 1.37.0
GHSA-455c-vgg9-jxw8 2026-10-03 medium | Failed cipher share leaves a cross-organization collection link that grants access to the  | rust:vaultwarden | < 1.37.0 -> 1.37.0
GHSA-rqf8-2568-r7mc 2026-10-03 medium | Manager-with-no-collections can enumerate org user/group → collection mappings (incomplete | rust:vaultwarden | <= 1.36.0 -> 1.37.0
GHSA-hw4g-2v3f-74x5 2026-10-03 medium | Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs | rust:vaultwarden | <= 1.36.0 -> 1.37.0
GHSA-72vh-x5jq-m82g 2026-05-19 medium | Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass | :vaultwarden | <1.35.8 -> 1.36.0
GHSA-c5rv-q295-7w4g 2026-04-25 high | Brute-force protection bypass vulnerability | :vaultwarden | <1.35.4 -> 1.35.4
GHSA-937x-3j8m-7w7p 2026-04-25 high | Unconfirmed Owner Can Purge Entire Organization Vault | rust:vaultwarden | <=1.35.4 -> 1.35.5
GHSA-569v-845w-g82p 2026-04-25 high | Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organizati | rust:vaultwarden | <=1.35.4 -> 1.35.5
GHSA-6x5c-84vm-5j56 2026-05-19 high | SSO Email Auto-Link Can Bind an Existing Local Account to an Attacker-Controlled IdP Ident | :vaultwarden | <=1.35.8 -> 1.36.0
GHSA-6j4w-g4jh-xjfx 2026-04-25 medium | Refresh tokens not invalidated on security stamp rotation | rust:Vaultwarden | <= 1.35.4 -> 1.35.5
GHSA-hxqh-ff5p-wfr3 2026-05-19 medium | Authentication Flow Information Disclosure in SSO Discovery Allows Organization Enumeratio | :vaultwarden | <1.35.8 -> 1.36.0
GHSA-x7g7-cgx5-jhx2 2026-04-25 medium | Vaultwarden: WebAuthn assertion processed before signature verification allows persistent  | rust:vaultwarden | <= 1.35.4 -> 1.35.5
GHSA-jjxg-p3v6-52ww 2026-04-26 medium | Missing authorization check in /organizations/{org_id}/collections/details allows Manager- | :vaultwarden | 1.35.4 -> 1.35.5
GHSA-pfp2-jhgq-6hg5 2026-05-19 high | CSRF in SSO Authorization Flow | :vaultwarden | <1.35.8 -> 1.36.0
GHSA-w9f8-m526-h7fh 2026-03-04 medium | Unauthorized Access via Partial Update API on Another User’s Cipher | rust:vaultwarden | 1.35.3 -> 1.35.4
GHSA-h4hq-rgvh-wh27 2026-03-04 high | Collection Management Operations Allowed Without `manage` Verification for Manager Role | rust:vaultwarden | 1.35.3 -> 1.35.4
GHSA-r32r-j5jq-3w4m 2026-03-04 high | Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager | rust:vaultwarden | 1.35.3 -> 1.35.4
GHSA-h265-g7rm-h337 2026-02-11 medium | Full Cipher Enumeration Ignoring Organization Collection Permissions | :vaultwarden | <= 1.35.2 -> 1.35.3
GHSA-v6pg-v89r-w8wr 2026-03-04 medium | 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement | :Vaultwarden | 1.34.3 -> 1.35.0
GHSA-f7r5-w49x-gxm3 2025-01-25 high | Getting access to the Admin Panel via CSRF | docker hub:vaultwarden/server | <=1.32.7 -> 1.33.0
GHSA-h6cc-rc6q-23j4 2025-01-25 high | RCE in the admin panel | docker hub:vaultwarden/server | <=1.32.7 -> 1.33.0
GHSA-j4h8-vch3-f797 2025-01-25 high | Escalation of privilege via variable confusion in OrgHeaders trait | docker hub:vaultwarden/server | <=1.32.7 -> 1.33.0
GHSA-g65h-982x-4m5m 2024-12-20 high | Privilege escalation allows organization groups to be updated/deleted if their UUID is kno | docker hub:vaultwarden/server | <1.32.6 -> 1.32.7
