Vulnerable: version 1.13.1 is affected by 13 known vulnerabilities. See below.
wip/vault 1.13.1 NetBSD
Tool for managing secrets
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- mpl-2.0
- Categories
- wip, security
Description
Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. Vault provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.
In the other systems
The newest version among them is 2.2.1, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | wip/vault | 1.13.1 behind since 2026-07-09 | 13 known | - | [email protected] | - |
| FreeBSD | security/vault by name | 2.2.1 newest | none known | - | [email protected] | 2026-10-23 |
| OpenBSD | security/vault by name | 2.1.0 behind since 2026-09-28 | no data | - | Pavel Korovin <[email protected]> | 2026-10-05 |
| DragonFly | security/vault by name | 1.8.7_12 behind since 2026-07-09 | none known | - | [email protected] | - |
| HardenedBSD | security/vault by name | 2.1.2 behind since 2026-10-17 | no data | - | [email protected] | - |
| GhostBSD | security/vault by name | 2.1.0 behind since 2026-09-28 | no data | - | [email protected] | - |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/vault && make install clean
Dependencies
No port depends on this one.
Known vulnerabilities 13
- vault: authentication-bypass (CVE-2023-3462)
- vault: authentication-bypass (CVE-2025-11621)
- vault: denial-of-service (CVE-2025-12044)
- vault: denial-of-service (CVE-2025-4656)
- vault: privilege-escalation (CVE-2025-5999)
- vault: arbitrary-code-execution (CVE-2025-6000)
- vault: security-bypass (CVE-2025-6004)
- vault: username-enumeration (CVE-2025-6011)
- vault: authentication-bypass (CVE-2025-6013)
- vault: authentication-bypass (CVE-2025-6014)
- vault: security-bypass (CVE-2025-6015)
- vault: improper-certificate-validation (CVE-2025-6037)
- vault: denial-of-service (CVE-2025-6203)