agentprime: dani-garcia-vaultwardenEvery new CVE for dani-garcia-vaultwarden.https://agentprime.io/CVE-2026-116678: Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLshttps://agentprime.io/advisories/CVE-2026-116678/https://agentprime.io/advisories/CVE-2026-116678/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:27:03 GMTCVECVE-2026-95814: Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Checkhttps://agentprime.io/advisories/CVE-2026-95814/https://agentprime.io/advisories/CVE-2026-95814/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:21:13 GMTCVECVE-2026-47160: Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypasshttps://agentprime.io/advisories/CVE-2026-47160/https://agentprime.io/advisories/CVE-2026-47160/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 15:04:15 GMTCVECVE-2026-47164: Vaultwarden: SSO Email Auto-Link Can Bind an Existing Local Account to an Attacker-Controlled IdP Identityhttps://agentprime.io/advisories/CVE-2026-47164/https://agentprime.io/advisories/CVE-2026-47164/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 15:03:22 GMTCVECVE-2026-47159: Vaultwarden: Authentication Flow Information Disclosure in SSO Discovery Allows Organization Enumeration and Pre-Validation Token Exposurehttps://agentprime.io/advisories/CVE-2026-47159/https://agentprime.io/advisories/CVE-2026-47159/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 15:02:46 GMTCVECVE-2026-47158: Vaultwarden: CSRF in SSO Authorization Flowhttps://agentprime.io/advisories/CVE-2026-47158/https://agentprime.io/advisories/CVE-2026-47158/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 15:01:51 GMTCVECVE-2026-43914: Vaultwarden: Brute-force protection bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2026-43914/https://agentprime.io/advisories/CVE-2026-43914/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 22:03:58 GMTCVECVE-2026-43913: Vaultwarden: Unconfirmed Owner Can Purge Entire Organization Vaulthttps://agentprime.io/advisories/CVE-2026-43913/https://agentprime.io/advisories/CVE-2026-43913/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 22:01:35 GMTCVECVE-2026-43912: Vaultwarden: Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organizationhttps://agentprime.io/advisories/CVE-2026-43912/https://agentprime.io/advisories/CVE-2026-43912/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:56:30 GMTCVECVE-2026-43911: Vaultwarden: Refresh tokens not invalidated on security stamp rotationhttps://agentprime.io/advisories/CVE-2026-43911/https://agentprime.io/advisories/CVE-2026-43911/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:54:41 GMTCVECVE-2026-33420: Vaultwarden missing authorization check allows Manager-role users to enumerate all collectionshttps://agentprime.io/advisories/CVE-2026-33420/https://agentprime.io/advisories/CVE-2026-33420/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 19:12:24 GMTCVECVE-2026-31835: Vaultwarden WebAuthn credential metadata tampered before signature verificationhttps://agentprime.io/advisories/CVE-2026-31835/https://agentprime.io/advisories/CVE-2026-31835/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 18:51:35 GMTCVECVE-2026-26012: vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissionshttps://agentprime.io/advisories/CVE-2026-26012/https://agentprime.io/advisories/CVE-2026-26012/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 21:14:58 GMTCVECVE-2025-24365: vaultwarden allows escalation of privilege via variable confusion in OrgHeaders traithttps://agentprime.io/advisories/CVE-2025-24365/https://agentprime.io/advisories/CVE-2025-24365/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 17:49:57 GMTCVECVE-2025-24364: vaultwarden allows RCE in the admin panelhttps://agentprime.io/advisories/CVE-2025-24364/https://agentprime.io/advisories/CVE-2025-24364/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 17:46:15 GMTCVECVE-2024-56335: Privilege escalation allows organization groups to be updated/deleted if their UUID is known in vaultwardenhttps://agentprime.io/advisories/CVE-2024-56335/https://agentprime.io/advisories/CVE-2024-56335/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Dec 2024 20:15:35 GMTCVE