CVE security advisories and vulnerability history for github.com/hashicorp/vault by hashicorp.
55
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
3
Public exploits
PoC or exploit code
7.2
Avg CVSS
2020–2026
Last updated
Overview
hashicorp github.com/hashicorp/vault has 55 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting hashicorp github.com/hashicorp/vault, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of hashicorp github.com/hashicorp/vault's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical7
High26
Medium20
Low2
In CISA’s Known Exploited Vulnerabilities catalog
0
None of hashicorp github.com/hashicorp/vault's CVEs are currently listed in CISA's KEV catalog.
Public exploits
3
3 of hashicorp github.com/hashicorp/vault's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every hashicorp github.com/hashicorp/vault version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
< 1.20.13 CVEs
1.12.0 <= v < 1.12.53 CVEs
1.13.0 <= v < 1.13.13 CVEs
< 1.11.92 CVEs
1.15.0 <= v < 1.15.52 CVEs
1.16.0-rc1 <= v < 1.16.32 CVEs
1.3.0 <= v < 1.3.82 CVEs
1.4.0 <= v < 1.4.42 CVEs
1.5.0 <= v < 1.5.12 CVEs
1.8.0 <= v < 1.8.52 CVEs
< 1.10.111 CVE
Common weakness types
The CWE weakness categories most often found in hashicorp github.com/hashicorp/vault CVEs. Follow any weakness for its full explanation.
Common questions about hashicorp github.com/hashicorp/vault vulnerabilities.
How many CVEs does hashicorp github.com/hashicorp/vault have?
hashicorp github.com/hashicorp/vault has 55 published CVE records since 2020.
How many hashicorp github.com/hashicorp/vault CVEs are in CISA KEV?
None of hashicorp github.com/hashicorp/vault's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for hashicorp github.com/hashicorp/vault vulnerabilities?
Yes — 3 of hashicorp github.com/hashicorp/vault's CVEs have a known public exploit.
Which versions of hashicorp github.com/hashicorp/vault are affected?
157 distinct hashicorp github.com/hashicorp/vault versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in hashicorp github.com/hashicorp/vault CVEs?
hashicorp github.com/hashicorp/vault's CVEs most often map to these CWE weakness types: CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-266 (Incorrect Privilege Assignment), CWE-295 (Improper Certificate Validation), CWE-532 (Insertion of Sensitive Information into Log File).
How many critical hashicorp github.com/hashicorp/vault vulnerabilities are there?
hashicorp github.com/hashicorp/vault has 7 critical and 26 high-severity CVEs.
What is the average severity of hashicorp github.com/hashicorp/vault CVEs?
The average CVSS base score across hashicorp github.com/hashicorp/vault's scored CVEs is 7.2.
