npm/hashi-vault-js CVE-2026-55100: high, EPSS 0.56%
hashi-vault-js has a path traversal and query parameter injection
Action: Upgrade hashi-vault-js to 0.5.2 or later.
npm i hashi-vault-js@0.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.2 | - |
Fixed versions
| 0.5.2 |
Sources
- osv: GHSA-g956-2f74-rmv7
- https://github.com/kyndryl-open-source/hashi-vault-js/security/advisories/GHSA-g956-2f74-rmv7
- https://github.com/kyndryl-open-source/hashi-vault-js/pull/66
- https://github.com/kyndryl-open-source/hashi-vault-js/commit/ea2f76052d366a08f35f62ef4c12b6a334c91ec2
- https://github.com/kyndryl-open-source/hashi-vault-js
- https://github.com/kyndryl-open-source/hashi-vault-js/releases/tag/v0.5.2
CVE-2026-55100 · published · modified · JSON