FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Vaultwarden -- Multiple vulnerabilities

Affected packages
		vaultwarden	<	1.37.4

Details

VuXML ID	3a72cd47-c157-11f1-a6ea-8447094a420f
Discovery	2026-10-06
Entry	2026-10-06

The Vaultwarden project reports:

Organization member revocation [GHSA-69q9-v8p6-xvx3] (High, 8.1)

Two-factor authentication [GHSA-7jg8-8m5x-6j9r] (Medium, 6.8)

Organization invitations [GHSA-v576-3wvq-xh3c] (Medium, 6.8)

Attachments [GHSA-q5x6-grh5-fqgc] (Medium, 6.5)

Organization event logs [GHSA-64mc-4p6f-r7x9] (Medium, 4.3)

Cipher sharing [GHSA-7ccc-c43j-4p36] (Medium, 4.3)

Organization API key [GHSA-qwx4-wcv4-mpcv] (Low, 3.8)

[source]

References

URL	https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.4