Vulnerabilities

TI-2026-74994 CVE-2026-94621

Server-side request forgery in AliasVault favicon extraction

LOW 27

AliasVault is a privacy-first password manager with built-in email aliasing.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00195 Published 2026-10-15 Fixed in 0.30.3 CWE-367

TI-2026-74985 CVE-2026-55587

LOW 36

AliasVault is a privacy-first password manager with built-in email aliasing.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00148 Published 2026-10-15 Fixed in 0.29.4 CWE-346

TI-2026-21236 CVE-2026-26266

MEDIUM 42

AliasVault is a privacy-first password manager with built-in email aliasing.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00278 Published 2026-03-03 Fixed in 0.26.0 CWE-79

TI-2026-02566 CVE-2026-2974 · GHSA-hx47-q2x9-r28j

MEDIUM 44

A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00111 Published 2026-02-23 Fixed in 0.26.0 CWE-285

TI-2026-18221 CVE-2026-22694

LOW 26

AliasVault is a privacy-first password manager with built-in email aliasing.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00135 Published 2026-01-14 Fixed in 0.25.3 CWE-346

TI-2025-36905 CVE-2025-59344

LOW 34

AliasVault is a privacy-first password manager with built-in email aliasing.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00328 Published 2025-09-19 Fixed in 0.23.1 CWE-918