Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths

Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates

Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses

Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption

Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend

Vault TOTP Secrets Engine Code Reuse

Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin

Vault Leaks AppRole Client Tokens And Accessor in Audit Log

Vault May Expose Sensitive Information When Configuring An Audit Log Device

Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata

Vault PKI ACME Issues Certificate With Unvalidated SANs

Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse

Vault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node

Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution

Vault’s KV Diff Viewer Allowed for HTML Injection

Vault Userpass and LDAP User Lockout Bypass

Vault's LDAP Auth Method Allows for User Enumeration

Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service

Vault Enterprise Namespace Creation May Lead to Denial of Service

Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations

Audit Log Plugin Directory Guard Bypass via Legacy path Option

Vault vulnerable to LIST authorization bypass via trailing-slash strip