{"action":"Upgrade vaultwarden to 1.32.0-r0 or later.","affected":[{"fixed":"1.32.0-r0","introduced":"0"}],"component":"vaultwarden","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.21","exploited":false,"fixed_versions":["1.32.0-r0"],"id":"tcs_01M6GHXFZSNYRPBV5RG2M0459K","modified_at":"2026-11-03T06:32:08.609960471Z","published_at":"2024-09-13T18:15:03.927Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2024-39925","https://security.alpinelinux.org/vuln/CVE-2024-39925"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2024-39925#Alpine:v3.21/vaultwarden","url":"https://osv.dev/vulnerability/ALPINE-CVE-2024-39925"}],"summary":"An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. It lacks an offboarding process for members who leave an organization. As a result, the shared organization key is not rotated wh"}