Vulnerable: version 1.6.6nb57 is affected by 20 known vulnerabilities. See below.
security/vault 1.6.6nb57 NetBSD
Tool for managing secrets
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
309977eb40- License
- mpl-2.0
- Categories
- security
- Package size
- 21483.4 KiB, 107215.8 KiB installed
Description
Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. Vault provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | security/vault | 1.6.6nb57 |
| FreeBSD | security/vault | 2.2.0_1 |
| OpenBSD | security/vault | 2.1.0 |
| DragonFly | security/vault | 1.8.7_12 |
| HardenedBSD | security/vault | 2.1.1 |
| GhostBSD | security/vault | 2.1.0 |
Install
Binary package:
pkgin install vault
From pkgsrc:
cd /usr/pkgsrc/security/vault && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 1.6.6nb57 |
| NetBSD 10.1 aarch64 | 1.6.6nb52 |
| SmartOS / illumos x86_64 | 1.6.6nb59 |
| macOS 15 arm64 | - |
Dependencies
No port depends on this one.
Known vulnerabilities 20
- vault: insecure-file-permissions (CVE-2021-38553)
- vault: sensitive-information-disclosure (CVE-2021-38554)
- vault: privilege-escalation (CVE-2021-41802)
- vault: privilege-escalation (CVE-2021-42135)
- vault: invalid-validation (CVE-2021-43998)
- vault: authentication-bypass (CVE-2021-45042)
- vault: improper-access-control (CVE-2022-36129)
- vault: sql-injection (CVE-2023-0620)
- vault: denial-of-service (CVE-2023-0665)
- vault: html-attribute-injection (CVE-2023-2121)
- vault: authentication-bypass (CVE-2023-24999)
- vault: denial-of-service (CVE-2023-25000)
- vault: authentication-bypass (CVE-2023-3462)
- vault: authentication-bypass (CVE-2023-4680)
- vault: permission-problem (CVE-2023-5077)
- vault: authentication-bypass (CVE-2025-11621)
- vault: denial-of-service (CVE-2025-12044)
- vault: denial-of-service (CVE-2025-4656)
- vault: privilege-escalation (CVE-2025-5999)
- vault: arbitrary-code-execution (CVE-2025-6000)
Commit history 9
The latest 5 of 9 in the history this site was built from.