VYPR

hashi-vault-js

by Kyndryl Open Source

Source repositories

CVEs (2)

  • CVE-2026-55100HigJul 31, 2026
    risk 0.50cvss epss 0.00

    hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of using…

  • CVE-2026-55102MedSep 14, 2026
    risk 0.31cvss epss 0.00

    hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError(), which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response…