CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/07/24 13:32:13
Modified files:
security/vaultwarden: Makefile crates.inc distinfo
Log message:
Update to vaultwarden-1.37.0
This release contains security fixes for the following advisories:
- SSRF via the icon endpoint [GHSA-hw4g-2v3f-74x5] [GHSA-vh5m-fc9v-m84g]
- Cross-Organization Cipher Access [GHSA-xwf8-pjh7-h589]
- Organization Policy Bypass on Directory Import [GHSA-88qc-6ch9-mc3j]
- Send Access-Count Bypass [GHSA-rxhg-2pw9-vf25]
- Unauthenticated WebSocket Flooding DDOS [GHSA-96f7-78q5-j345]
- Cross-Organization Secret Sharing [GHSA-455c-vgg9-jxw8]
- Organization Import Authorization
[GHSA-f3qw-qg77-hmm4][GHSA-jq2g-h4xr-4mcr]
- Organization Data Enumeration via the Manager role
[GHSA-rqf8-2568-r7mc]
Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.0
