| Package | Affected versions | Patched versions |
|---|---|---|
| vault | ≥ 1.6.0, < 1.6.2< 1.5.7 | 1.6.21.5.7 |
HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free