BSD PortsVaultwarden -- Multiple vulnerabilities
The Vaultwarden project reports: Organization member revocation [GHSA-69q9-v8p6-xvx3] (High, 8.1) Two-factor authentication [GHSA-7jg8-8m5x-6j9r] (Medium, 6.8) Organization invitations [GHSA-v576-3wvq-xh3c] (Medium, 6.8) Attachments [GHSA-q5x6-grh5-fqgc] (Medium, 6.5) Organization event logs [GHSA-64mc-4p6f-r7x9] (Medium, 4.3) Cipher sharing [GHSA-7ccc-c43j-4p36] (Medium, 4.3) Organization API key …
Affected versions
- vaultwarden < 1.37.4
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | security/vaultwarden | 1.37.4_1 | fixed | (1 days after) |
| OpenBSD | security/vaultwarden | 1.37.4 | out of range, by version | |
| NetBSD | security/vaultwarden | 1.37.2 | not listed |