All vulnerabilities

Servers and applications

GHSA-64mc-4p6f-r7x9

Revoked or unconfirmed organization Admin can read cipher audit logs

Severity
Medium 4.3
Published
28 Oct 2026
Last changed
28 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.37.4
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
VaultwardenServers and applications · github:dani-garcia/vaultwarden
  • Every version before 1.37.4

References