CVE-2026-32317

Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 1.12.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism...

CVE-2026-32318

Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 2.8.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism. Befo...

CVE-2026-32318

Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 2.8.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism. Befo...

PT-2026-26660

Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 2.8.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism. Befo...

org.springframework.cloud:spring-cloud-starter-vault-config (1.1.3.release), org.springframework.cloud:spring-cloud-vault-config (1.1.3.release) +4 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (1.1.3.release)

org.springframework.vault:spring-vault-core MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.springframework.cloud:spring-cloud-starter-vault-config...

org.apache.camel.quarkus:camel-quarkus-hashicorp-vault (3.0.0-m1), org.apache.camel.quarkus:camel-quarkus-hashicorp-vault-deployment (3.0.0-m1) +11 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (3.0.0)

org.springframework.vault:spring-vault-core MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.apache.camel.quarkus:camel-quarkus-hashicorp-vault 3.0.0-m1 -...

org.springframework.cloud:spring-cloud-starter-vault-config (>=1.1.1.release, <=1.1.2.release), org.springframework.cloud:spring-cloud-vault-config (>=1.1.1.release, <=1.1.2.release) +4 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (1.1.2.release)

org.springframework.vault:spring-vault-core MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.springframework.cloud:spring-cloud-starter-vault-config...

io.pivotal.spring.cloud:spring-cloud-vault-localconfig-connector (1.0.0.release), net.nemerosa.ontrack:ontrack-extension-vault (>=experimental-pipeline-a6e0b79, <=3.41-beta.18) +9 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (1.1.1.release)

org.springframework.vault:spring-vault-core MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - io.pivotal.spring.cloud:spring-cloud-vault-localconfig-connector...

org.apereo.cas:cas-server-core-configuration-cloud-vault (>=5.2.0-rc2, <=5.2.9), org.springframework.cloud:spring-cloud-starter-vault-config (1.0.2.release) +5 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (1.0.2.release)

org.springframework.vault:spring-vault-core MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-vault...

org.apache.camel.quarkus:camel-quarkus-hashicorp-vault (3.0.0-m1), org.apache.camel.quarkus:camel-quarkus-hashicorp-vault-deployment (3.0.0-m1) +11 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (3.0.0)

org.springframework.vault:spring-vault-core MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.apache.camel.quarkus:camel-quarkus-hashicorp-vault 3.0.0-m1 -...