{"action":"Upgrade vaultwarden to 1.32.5 or later.","affected":[{"fixed":"1.32.5","introduced":"0"}],"component":"vaultwarden","cve_ids":["CVE-2024-55224"],"ecosystem":"crates.io","epss":0.00843,"exploited":false,"fixed_versions":["1.32.5"],"ghsa_id":"GHSA-g5x8-v2ch-gj2g","id":"tcs_01M5KEZQZQCNQHQJ56DMPRE7AW","modified_at":"2025-01-09T23:27:21.494654Z","published_at":"2025-01-09T21:31:32Z","references":["https://osv.dev/vulnerability/GHSA-g5x8-v2ch-gj2g","https://nvd.nist.gov/vuln/detail/CVE-2024-55224","https://github.com/dani-garcia/vaultwarden","https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4","https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.5","https://insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-g5x8-v2ch-gj2g","url":"https://osv.dev/vulnerability/GHSA-g5x8-v2ch-gj2g"},{"source":"nvd","source_id":"CVE-2024-55224","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55224"}],"summary":"Vaultwarden HTML injection vulnerability"}