PT-2026-37220

Vaultwarden is a Bitwarden-compatible server written in Rust. In version 1.35.4 and earlier, the get org collections details endpoint GET /api/organizations/org id/collections/details is missing the has full access authorization check that exists on the sibling get org collections endpoint. This...

PT-2026-23071

Name of the Vulnerable Software and Affected Versions Vaultwarden versions prior to 1.35.4 Description A Manager account with limited permissions was able to gain elevated privileges by using the bulk-access API to modify permissions on collections they were not originally authorized to access. T...

[SECURITY] Fedora 40 Update: vaultwarden-1.33.2-1.fc40

Unofficial Bitwarden compatible server...

[SECURITY] Fedora 41 Update: vaultwarden-1.33.0-1.fc41

Unofficial Bitwarden compatible server...

[SECURITY] Fedora 40 Update: vaultwarden-1.32.7-4.fc40

Unofficial Bitwarden compatible server...