Jopenlibs Vault-Java-Driver
2 CVEs affecting Jopenlibs Vault-Java-Driver. Latest disclosed: 2026-11-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-109408 | High | 7.4 | 2026-11-05 | vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three states where the caller asked for ve… |
CVE-2026-112072 | Medium | 6.5 | 2026-11-05 | vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-json parser that has no nesting depth limit. A deep… |