Skip to content

[3.21] community/vaultwarden: upgrade to 1.32.7

Fabricio Silva requested to merge fabricionaweb/aports:3.21/update-vaultwarden into 3.21-stable

Security Fixes

We have yet a few other security fixes for this release. We discovered that groups were able to be edited by any admin from any organization because the organization was not validated or used within the query. This could potentially allow an admin from other organizations to modify, or delete groups from any organization if they know the uuid of the group. We suggest people to update a.s.a.p. to mitigate this risk.

https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.7

Merge request reports