https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:12:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06973 bdu:2025-06973 https://cve.radiocsirt.org/vuln/bdu:2025-06973 https://cve.radiocsirt.org/vuln/bit-openbao-2025-4166 <p><strong>Affected:</strong> Bitnami: openbao</p> <p>Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.</p> <p><strong>Affected:</strong> Bitnami: openbao</p> <p>Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.</p> https://cve.radiocsirt.org/vuln/bit-openbao-2025-4166 https://cve.radiocsirt.org/vuln/euvd-2026-238401 EUVD-2026-238401 https://cve.radiocsirt.org/vuln/euvd-2026-238401 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4166 <p>Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.</p> <p>Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-4166 https://cve.radiocsirt.org/vuln/ghsa-gcqf-f89c-68hv <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.</p> https://cve.radiocsirt.org/vuln/ghsa-gcqf-f89c-68hv https://cve.radiocsirt.org/vuln/opensuse-su-2025:15059-1 <p>govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15059-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0933 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0933