An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.1% on proxy.golang.org
Top 0.1% dependent packages on proxy.golang.org
Top 0.2% dependent repos on proxy.golang.org
Top 0.1% forks on proxy.golang.org
Top 0.1% docker downloads on proxy.golang.org

proxy.golang.org : github.com/hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/hashicorp/vault
Keywords: go , secrets , vault
License: GPL-1.0+
Latest release: 11 days ago
First release: about 10 years ago
Namespace: github.com/hashicorp
Dependent packages: 4,892
Dependent repositories: 2,322
Stars: 28,439 on GitHub
Forks: 4,010 on GitHub
Docker dependents: 285
Docker downloads: 572,939,043
Total Commits: 15979
Committers: 1362
Average commits per author: 11.732
Development Distribution Score (DDS): 0.801
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Last synced: about 18 hours ago

High
GSA_kwCzR0hTQS1yM3c3LW1mcG0tYzJ2d84AA5wI
Incorrect TLS certificate auth method in Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 1 year ago
Critical
GSA_kwCzR0hTQS01N2dnLWNqNTUtcTVnMs4AArAN
Token leases could outlive their TTL in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 3 years ago
High
GSA_kwCzR0hTQS1ycTk1LXhmNjYtajY4Oc4AA4-1
Improper Authentication in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1ncTk4LTUzcnEtcXI1aM4AAzw5
Hashicorp Vault vulnerable to Cross-site Scripting
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1mOWNoLWg4ajctOGp3Z84ABHci
Hashicorp Vault Community vulnerable to Incorrect Authorization
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 23 days ago
Critical
GSA_kwCzR0hTQS1wZm13LXZqNzQtcGg4Z80YjQ
HashiCorp Vault Incorrect Permission Assignment for Critical Resource
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 3 years ago
High
GSA_kwCzR0hTQS00cWhjLXY4cjYtOHZ3bc4AA3B2
HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
High
GSA_kwCzR0hTQS1nMjMzLTJwNHItM3E3ds4ABA2E
Hashicorp Vault vulnerable to denial of service through memory exhaustion
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 7 months ago
High
GSA_kwCzR0hTQS1qZzc0LW13Z3ctdjZ4M84AA_zy
Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 8 months ago
High
GSA_kwCzR0hTQS04NmM2LTNnNjMtNXc2NM4AA2Id
Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
High
GSA_kwCzR0hTQS0ycW13LXB2ZjctNG13Ns4AA90R
Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 11 months ago
Low
GSA_kwCzR0hTQS1xdjk1LWczZ20teDU0Ms0Wfg
Hashicorp Vault Privilege Escalation Vulnerability
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 3 years ago
Moderate
GSA_kwCzR0hTQS1nY3FmLWY4OWMtNjhods4ABHay
Hashicorp Vault Community vulnerable to Generation of Error Message Containing Sensitive Information
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 23 days ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM4ajktN3BwOS0yaGp3
Invalid session token expiration
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: almost 4 years ago
Moderate
GSA_kwCzR0hTQS12cTRoLTlnaG0tcW1ycs4AAydP
HashiCorp Vault's implementation of Shamir's secret sharing vulnerable to cache-timing attacks
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1od2MzLTNxaDYtcjRnZ84AAydO
HashiCorp Vault's PKI mount vulnerable to denial of service
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 2 years ago
High
GSA_kwCzR0hTQS13bWc1LWc5NTMtcXFmd84AA0UP
Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS12M2hwLW1jajUtcGczOc4AAydQ
HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 2 years ago
Critical
GSA_kwCzR0hTQS1qNnZ2LXZ2MjYtcmg3Y84AA488
HashiCorp Vault Improper Privilege Management
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
Critical
GSA_kwCzR0hTQS03Y2d2LXY4M3YtcnI4N84AAvAP
HashiCorp Vault vulnerable to incorrect metadata access
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1ycGdwLTlobWctajI1eM4AA4-x
Enumeration of users in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzZnEtcTdoYy05OTNy
HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 3 years ago
High
GSA_kwCzR0hTQS0zNjJ2LXdnNXAtNjR3Ms0Wgw
Incorrect Privilege Assignment in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 3 years ago
Moderate
GSA_kwCzR0hTQS1jNXdjLXYyODctODJwY84AAgYl
HashiCorp Vault improper configuration of multi factor authentication
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 3 years ago
Moderate
GSA_kwCzR0hTQS12Z2gzLW13eHEtcmNwOM4AA4--
Hashicorp Vault may expose sensitive log information
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS05djN3LXcyamgtNGhmZs4AA0-S
HashiCorp Vault and Vault Enterprise vulnerable to user enumeration
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: almost 2 years ago
High
GSA_kwCzR0hTQS02cDYyLTZjZzktZjVmNc4AA3ph
Memory exhaustion in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTYyMzktMjhjMi05bXJt
Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 3 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTl2aDUtcjRxdy12M3Z2
Improper Resource Shutdown or Release in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: almost 4 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZwNTItcXczMy1tZm13
Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: almost 4 years ago
Moderate
GSA_kwCzR0hTQS1tOTc5LXc5d2otcWZqOc4AA489
HashiCorp Vault Improper Privilege Management
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
High
GSA_kwCzR0hTQS00bXA3LTJtMjktZ3F4Zs4AA49E
HashiCorp Vault Authentication bypass
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS05bWg4LTlqNjQtNDQzZs4AA0RO
HashiCorp Vault's revocation list not respected
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1ycjhqLTd3MzQteHA1as4ABALz
Vault Community Edition privilege escalation vulnerability
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 8 months ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI1eGotODlnNS1mbTZo
Information Disclosure in HashiCorp Vault
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 4 years ago
Moderate
GSA_kwCzR0hTQS1qanhmLTI2YzktNzdnbc4AA_Oa
Vault Leaks Client Token and Token Accessor in Audit Devices
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS12ODRmLTZyMzktY3BmY84AA14s
HashiCorp Vault Improper Input Validation vulnerability
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: over 1 year ago
Low
GSA_kwCzR0hTQS0zMmNqLTV3eDQtZ3E4cM4AA8_N
HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1qMnJwLWdtcXYtZnJods4AA6pX
HashiCorpVault does not correctly validate OCSP responses
Ecosystems: go
Packages: github.com/hashicorp/vault
Source: github
Published: about 1 year ago