Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/github.com/hashicorp/vault@1.6.6
purl pkg:golang/github.com/hashicorp/vault@1.6.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-xk9c-q66v-3kcx Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pending 1.7.4 / 1.6.6 releases. CVE-2021-38554
GHSA-6239-28c2-9mrm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:01:24.741107+00:00 GithubOSV Importer Fixing VCID-xk9c-q66v-3kcx https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-6239-28c2-9mrm/GHSA-6239-28c2-9mrm.json 38.0.0