Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
github.com/openbao/openbao
|
OpenBao Agent Writes Secrets to Stdout | Low Risk 3.0 | 9 days ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao | Unknown | 7 hours ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack | Critical 9.5 | 9 days ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack in github.com/openbao/openbao | Unknown | 7 hours ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao Skips Stricter Deny Policy for LIST operations | Medium Risk 6.0 | 9 days ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao | Unknown | 7 hours ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters | High Risk 8.0 | 9 days ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters in github.com/openbao/openbao | Unknown | 7 hours ago | 6 hours ago |
|
github.com/openbao/openbao
|
OpenBao: LDAPi ldaputil (wrong escape func) | Medium Risk 6.8 | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao: LDAPi ldaputil (wrong escape func) in github.com/openbao/openbao | Unknown | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types | Medium Risk 6.5 | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types in github.com/openbao/openbao | Unknown | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 | Low Risk 3.0 | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 in github.com/openbao/openbao | Unknown | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao's System Backend allows Unauthorized Management of the containing Namespace | Low Risk 3.0 | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao's System Backend allows Unauthorized Management of the containing Namespace in github.com/openbao/openbao | Unknown | 3 months ago | 6 days ago |
|
github.com/openbao/openbao
|
OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation | Low Risk 3.0 | 5 months ago | 21 days ago |
|
github.com/openbao/openbao
|
OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) | Low Risk 3.1 | 5 months ago | 21 days ago |
|
github.com/openbao/openbao
|
OpenBao's SQL Injection in PostgreSQL database secrets engine | Medium Risk 4.9 | 5 months ago | 21 days ago |
|
github.com/openbao/openbao
|
OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate | Low Risk 3.1 | 5 months ago | 21 days ago |
|
github.com/openbao/openbao
|
Hashicorp Vault vulnerable to denial of service through memory exhaustion | High Risk 7.5 | 1 year ago | 21 days ago |
|
github.com/openbao/openbao
|
Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default | High Risk 7.5 | 2 years ago | 21 days ago |
|
github.com/openbao/openbao
|
OpenBao's Inline Auth Incorrectly Redacted Headers | Medium Risk 6.0 | 4 months ago | 1 month ago |
|
github.com/openbao/openbao
|
OpenBao's Inline Auth Incorrectly Redacted Headers in github.com/openbao/openbao | Unknown | 3 months ago | 1 month ago |
|
github.com/openbao/openbao
|
OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL | High Risk 8.0 | 4 months ago | 1 month ago |
|
github.com/openbao/openbao
|
OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL in github.com/openbao/openbao | Unknown | 3 months ago | 1 month ago |
|
github.com/openbao/openbao
|
OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens | Medium Risk 5.3 | 4 months ago | 1 month ago |
|
github.com/openbao/openbao
|
OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens in github.com/openbao/openbao | Unknown | 3 months ago | 1 month ago |
|
github.com/openbao/openbao
|
OpenBao leaks HTTPRawBody in Audit Logs | Medium Risk 6.0 | 11 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao leaks HTTPRawBody in Audit Logs in github.com/openbao/openbao | Unknown | 11 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao lacks user confirmation for OIDC direct callback mode | Critical 9.6 | 6 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao lacks user confirmation for OIDC direct callback mode in github.com/openbao/openbao | Unknown | 6 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requests | High Risk 7.5 | 11 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requests in github.com/openbao/openbao | Unknown | 11 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao's SQL Injection in PostgreSQL database secrets engine in github.com/openbao/openbao | Unknown | 3 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate in github.com/openbao/openbao | Unknown | 3 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao allows cancellation of root rekey and recovery rekey operations without authentication | Medium Risk 6.0 | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao allows cancellation of root rekey and recovery rekey operations without authentication in github.com/openbao/openbao | Unknown | 1 year ago | 2 months ago |
|
github.com/openbao/openbao/sdk/v2
|
OpenBao Inserts Sensitive Information into Log File when processing malformed data | Medium Risk 4.5 | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao has a Timing Side-Channel in the Userpass Auth Method | Low Risk 3.7 | 1 year ago | 2 months ago |
|
github.com/openbao/openbao/sdk
|
OpenBao Inserts Sensitive Information into Log File when processing malformed data in github.com/openbao/openbao/sdk | Unknown | 1 year ago | 2 months ago |
|
github.com/openbao/openbao/sdk/v2
|
OpenBao Inserts Sensitive Information into Log File when processing malformed data in github.com/openbao/openbao/sdk | Unknown | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao has a Timing Side-Channel in the Userpass Auth Method in github.com/openbao/openbao | Unknown | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao is Vulnerable to Privileged Operator Identity Group Root Escalation | High Risk 8.0 | 10 months ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao is Vulnerable to Privileged Operator Identity Group Root Escalation in github.com/openbao/openbao | Unknown | 10 months ago | 2 months ago |
|
github.com/openbao/openbao
|
Vault Community Edition privilege escalation vulnerability | High Risk 7.2 | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao Userpass and LDAP User Lockout Bypass | Medium Risk 5.3 | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao Login MFA Bypass of Rate Limiting and TOTP Token Reuse | Medium Risk 5.7 | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao Userpass and LDAP User Lockout Bypass in github.com/openbao/openbao | Unknown | 1 year ago | 2 months ago |
|
github.com/openbao/openbao
|
OpenBao Login MFA Bypass of Rate Limiting and TOTP Token Reuse in github.com/openbao/openbao | Unknown | 1 year ago | 2 months ago |
Page 1