Vaultwarden v1.37.0 released
Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
Das aktuelle Update hat viele Security Fixes. So, mal besser installieren. Das Deb Package vom Nico ist auch schon veröffentlicht.
Und hier geht es zur Installation des Deb Packages -> https://frank-mankel.de/archive/420
Und wichtig, seit dieser Version kein arm64 Support mehr! Ihr müsst das Paket dann auf einen anderen Server migrieren. Quelle: https://bitwarden-deb.tech-network.de/
Note
This update is required for support with clients with version 2026.7.0+, please update before reporting any issues with them.
Security Fixes
This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.
SSRF via the icon endpoint [GHSA-hw4g-2v3f-74x5] [GHSA-vh5m-fc9v-m84g] (Medium, 5.8 / 6.3)
Cross-Organization Cipher Access [GHSA-xwf8-pjh7-h589] (Medium, 5.9)
Organization Policy Bypass on Directory Import [GHSA-88qc-6ch9-mc3j] (Medium, 5.5)
Send Access-Count Bypass [GHSA-rxhg-2pw9-vf25] (Medium, 5.3)
Unauthenticated WebSocket Flooding DDOS [GHSA-96f7-78q5-j345] (Medium, 5.3)
Cross-Organization Secret Sharing [GHSA-455c-vgg9-jxw8] (Medium, 4.3)
Organization Import Authorization [GHSA-f3qw-qg77-hmm4][GHSA-jq2g-h4xr-4mcr] (Medium, 4.3)
Organization Data Enumeration via the Manager role [GHSA-rqf8-2568-r7mc] (Medium, 4.3)
These are private for now, pending CVE assignment and publishing at a later date.