Try our Chrome extension
Easily add the current web-page from your browser directly into your changedetection.io tool, more great features coming soon!
Chrome Webstore
Changedetection.io needs your support!
You can help us by supporting changedetection.io on these platforms;
- Rate us at AlternativeTo.net
- Star us on GitHub
- Follow us at Twitter/X
- G2 Software reviews
- Check us out on LinkedIn
- And tell your friends and colleagues :)
The more popular changedetection.io is, the more time we can dedicate to adding amazing features!
Many thanks :)
changedetection.io team
Not yet seconds ago
False
Not yet seconds ago
Triggered text Ignored text Blocked text
2 weeks ago
tag:github.com,2008:https://github.com/dani-garcia/vaultwarden/releases Release notes from vaultwarden 2026-09-13T14:43:22Z tag:github.com,2008:Repository/121898717/1.37.3 2026-09-13T15:03:37Z 1.37.3 <h2>What's Changed</h2> <ul> <li>Fix password change with newer web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5235398205" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7634" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7634/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7634">#7634</a></li> <li>chore: remove duplicate "the" in ciphers.rs comment by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mvanhorn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mvanhorn">@mvanhorn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4522477263" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7254" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7254/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7254">#7254</a></li> <li>Ignore reset-password auto-enroll when mail is disabled by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xhon-pelushi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xhon-pelushi">@xhon-pelushi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5127261724" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7585" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7585/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7585">#7585</a></li> <li>Fix migration for MariaDB 12.2.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4534165890" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7265" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7265/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7265">#7265</a></li> <li>Add SSO_SIGNUPS_ALLOWED by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4540429166" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7272" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7272/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7272">#7272</a></li> <li>log_event take enum parameter not i32 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5254607811" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7656" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7656/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7656">#7656</a></li> <li>Misc Updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5313778494" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7676" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7676/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7676">#7676</a></li> <li>Update rust docker version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5340483217" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7689" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7689/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7689">#7689</a></li> <li>Fix organization import failing with missing field groups by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tom27052006/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tom27052006">@tom27052006</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5367287854" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7699" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7699/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7699">#7699</a></li> <li>Add <code>pm-32413-multi-client-password-management</code> feature flag by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tom27052006/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tom27052006">@tom27052006</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5314647695" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7677" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7677/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7677">#7677</a></li> <li>Log IP/username on two-factor email-login credential failures by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/crahn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/crahn">@crahn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5249704582" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7654" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7654/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7654">#7654</a></li> <li>Support admin reset 2fa by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4910399891" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7435" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7435/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7435">#7435</a></li> <li>fix(security): revoke 2FA remember tokens when credentials or 2FA change by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BryanFRD/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BryanFRD">@BryanFRD</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5325801241" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7682" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7682/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7682">#7682</a></li> <li>fix(security): rate limit prelogin and auth request endpoints by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BryanFRD/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BryanFRD">@BryanFRD</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5323383684" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7681" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7681/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7681">#7681</a></li> <li>fix: Correct invalid comment syntax in .dockerignore by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/niniconi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/niniconi">@niniconi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4547105822" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7274" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7274/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7274">#7274</a></li> <li>Update Rust and adjust DockerSettings by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5347162000" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7690" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7690/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7690">#7690</a></li> <li>Route service clients through shared HTTP setup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/txase/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/txase">@txase</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5237644848" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7639" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7639/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7639">#7639</a></li> <li>Fix iOS registration token response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tom27052006/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tom27052006">@tom27052006</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5386870772" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7714" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7714/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7714">#7714</a></li> <li>Use insert_into when possible by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3590925724" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6437" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6437/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6437">#6437</a></li> <li>Fix archiveDate update by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5401040592" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7722" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7722/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7722">#7722</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mvanhorn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mvanhorn">@mvanhorn</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4522477263" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7254" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7254/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7254">#7254</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xhon-pelushi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xhon-pelushi">@xhon-pelushi</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5127261724" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7585" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7585/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7585">#7585</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/crahn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/crahn">@crahn</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5249704582" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7654" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7654/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7654">#7654</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BryanFRD/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BryanFRD">@BryanFRD</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5325801241" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7682" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7682/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7682">#7682</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/niniconi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/niniconi">@niniconi</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4547105822" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7274" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7274/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7274">#7274</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.37.2...1.37.3"><tt>1.37.2...1.37.3</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.37.2 2026-08-24T09:42:38Z 1.37.2 <h2>Note</h2> <p>This update is required for support with clients with version 2026.8.0+, please update before reporting any issues with them.</p> <div class="markdown-alert markdown-alert-important"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-report mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Important</p><p>Also read <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="10665514" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/discussions/7615" data-hovercard-type="discussion" data-hovercard-url="/dani-garcia/vaultwarden/discussions/7615/hovercard" href="https://github.com/dani-garcia/vaultwarden/discussions/7615">#7615</a> for more details if you still have client issues!</p> </div> <h2>What's Changed</h2> <ul> <li>Fix Debian cross-linking with xx-cargo by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alexliluz/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/alexliluz">@alexliluz</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5022354820" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7524" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7524/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7524">#7524</a></li> <li>Fix playwright test by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5052827330" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7548" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7548/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7548">#7548</a></li> <li>Misc fixes and updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5074568603" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7558" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7558/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7558">#7558</a></li> <li>Include user email in successful login logs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lmogthb/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lmogthb">@lmogthb</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4997192020" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7496" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7496/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7496">#7496</a></li> <li>Fix sendmail executable permission check by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/p-boenisch/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/p-boenisch">@p-boenisch</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4976784737" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7483" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7483/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7483">#7483</a></li> <li>add dummy revisionDate by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5207209508" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7608" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7608/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7608">#7608</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alexliluz/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/alexliluz">@alexliluz</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5022354820" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7524" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7524/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7524">#7524</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lmogthb/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lmogthb">@lmogthb</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4997192020" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7496" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7496/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7496">#7496</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/p-boenisch/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/p-boenisch">@p-boenisch</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4976784737" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7483" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7483/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7483">#7483</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.37.1...1.37.2"><tt>1.37.1...1.37.2</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.37.1 2026-07-29T13:40:10Z 1.37.1 <h2>Note</h2> <p>This patch release resolves the issues with invites.<br> If you have applied any workaround to fix this locally, please revert those fixes to prevent possible other issues.</p> <p>I'm sorry that it took some time to check and validate this fix.</p> <p>Also, this release fixes an issue (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4972242554" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7475" data-hovercard-type="issue" data-hovercard-url="/dani-garcia/vaultwarden/issues/7475/hovercard" href="https://github.com/dani-garcia/vaultwarden/issues/7475">#7475</a>) with all the Alpine based images which are build using <a href="https://github.com/BlackDex/rust-musl/">https://github.com/BlackDex/rust-musl/</a>.<br> An issue with the build image OpenSSL compilation is resolved and those are used to build the new <code>alpine</code> tagged containers.</p> <h2>What's Changed</h2> <ul> <li>Always send initOrganization and orgUserHasExistingUser in invite URL by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vikfox/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vikfox">@vikfox</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4976348982" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7482" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7482/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7482">#7482</a></li> <li>Indirectly resolved <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4972242554" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7475" data-hovercard-type="issue" data-hovercard-url="/dani-garcia/vaultwarden/issues/7475/hovercard" href="https://github.com/dani-garcia/vaultwarden/issues/7475">#7475</a> by using newer rust-musl build images which had a compilation issue with OpenSSL.</li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vikfox/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vikfox">@vikfox</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4976348982" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7482" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7482/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7482">#7482</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.37.0...1.37.1"><tt>1.37.0...1.37.1</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.37.0 2026-07-24T17:04:39Z 1.37.0 <h2>Note</h2> <p>This update is required for support with clients with version 2026.7.0+, please update before reporting any issues with them.</p> <h2>Security Fixes</h2> <p>This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.</p> <ul> <li>SSRF via the icon endpoint <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-hw4g-2v3f-74x5">[GHSA-hw4g-2v3f-74x5]</a> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-vh5m-fc9v-m84g">[GHSA-vh5m-fc9v-m84g]</a> (<strong>Medium</strong>, 5.8 / 6.3)</li> <li>Cross-Organization Cipher Access <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-xwf8-pjh7-h589">[GHSA-xwf8-pjh7-h589]</a> (<strong>Medium</strong>, 5.9)</li> <li>Organization Policy Bypass on Directory Import <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-88qc-6ch9-mc3j">[GHSA-88qc-6ch9-mc3j]</a> (<strong>Medium</strong>, 5.5)</li> <li>Send Access-Count Bypass <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-rxhg-2pw9-vf25">[GHSA-rxhg-2pw9-vf25]</a> (<strong>Medium</strong>, 5.3)</li> <li>Unauthenticated WebSocket Flooding DDOS <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-96f7-78q5-j345">[GHSA-96f7-78q5-j345]</a> (<strong>Medium</strong>, 5.3)</li> <li>Cross-Organization Secret Sharing <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-455c-vgg9-jxw8">[GHSA-455c-vgg9-jxw8]</a> (<strong>Medium</strong>, 4.3)</li> <li>Organization Import Authorization <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-f3qw-qg77-hmm4">[GHSA-f3qw-qg77-hmm4]</a><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-jq2g-h4xr-4mcr">[GHSA-jq2g-h4xr-4mcr]</a> (<strong>Medium</strong>, 4.3)</li> <li>Organization Data Enumeration via the Manager role <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-rqf8-2568-r7mc">[GHSA-rqf8-2568-r7mc]</a> (<strong>Medium</strong>, 4.3)</li> </ul> <p>These are private for now, pending CVE assignment and publishing at a later date.</p> <h2>What's Changed</h2> <ul> <li>OpenDAL S3 parameter support by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/txase/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/txase">@txase</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3287507067" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6127" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6127/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6127">#6127</a></li> <li>Fix SSO Cookie path by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4382173686" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7187" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7187/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7187">#7187</a></li> <li>fix email 2fa for bw cli by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4450185346" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7225" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7225/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7225">#7225</a></li> <li>sso_auth improvements by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4405864436" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7197" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7197/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7197">#7197</a></li> <li>Reject unrecognised DATABASE_URL instead of silent SQLite fallback by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mfw78/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mfw78">@mfw78</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4217245271" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7061" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7061/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7061">#7061</a></li> <li>Switch to <code>xx-cargo</code> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3772401035" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6640" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6640/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6640">#6640</a></li> <li>Updates and fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4460035144" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7235" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7235/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7235">#7235</a></li> <li>Switch to Edition 2024, more clippy lints, and less macro calls by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4408900064" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7200" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7200/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7200">#7200</a></li> <li>Serve Apple app site association file by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/user71424q/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/user71424q">@user71424q</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4384497136" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7191" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7191/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7191">#7191</a></li> <li>Update Rust, Crates and GHA by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4598172790" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7307" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7307/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7307">#7307</a></li> <li>Fix enforce blocked by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4488786538" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7246" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7246/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7246">#7246</a></li> <li>Admin password recovery endpoint change by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4540359378" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7270" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7270/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7270">#7270</a></li> <li>fix(sends): emit hideEmail as non-null boolean in sync response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kvdb/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kvdb">@kvdb</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4561791970" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7283" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7283/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7283">#7283</a></li> <li>Org membership delete remove Invitation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4562318413" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7284" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7284/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7284">#7284</a></li> <li>[v2026.5.0] Registration request update by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4581524171" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7295" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7295/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7295">#7295</a></li> <li>[v2026.5.0] PutPolicy now using vnext format by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4581532163" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7296" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7296/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7296">#7296</a></li> <li>2026.6.0 send support by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4685729194" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7346" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7346/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7346">#7346</a></li> <li>Add SSO_AUTHORIZE_BODY by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4710704031" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7357" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7357/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7357">#7357</a></li> <li>Add <code>pm-26340-linux-biometrics-v2</code> feature flag by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pilotstew/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pilotstew">@pilotstew</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4710817837" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7358" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7358/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7358">#7358</a></li> <li>improve CI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/TriplEight/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/TriplEight">@TriplEight</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4116065943" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6991" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6991/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6991">#6991</a></li> <li>Misc updates and fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4839677125" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7406" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7406/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7406">#7406</a></li> <li>Remove old compatibility code by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4909684398" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7434" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7434/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7434">#7434</a></li> <li>Fix compilation with newer <code>rust-musl</code> version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4941910357" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7453" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7453/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7453">#7453</a></li> <li>Fix Custom Role CSS for new dialog markup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tom27052006/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tom27052006">@tom27052006</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4919988497" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7442" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7442/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7442">#7442</a></li> <li>Remove unused fields by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4956545601" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7458" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7458/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7458">#7458</a></li> <li>Update API response, crates and GHA by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4969802995" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7470" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7470/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7470">#7470</a></li> <li>Trusted proxy support, unauthenticated rate limit & other fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4970107876" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7472" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7472/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7472">#7472</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mfw78/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mfw78">@mfw78</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4217245271" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7061" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7061/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7061">#7061</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/user71424q/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/user71424q">@user71424q</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4384497136" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7191" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7191/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7191">#7191</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kvdb/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kvdb">@kvdb</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4561791970" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7283" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7283/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7283">#7283</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pilotstew/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pilotstew">@pilotstew</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4710817837" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7358" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7358/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7358">#7358</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/TriplEight/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/TriplEight">@TriplEight</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4116065943" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6991" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6991/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6991">#6991</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tom27052006/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tom27052006">@tom27052006</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4919988497" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7442" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7442/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7442">#7442</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.36.0...1.37.0"><tt>1.36.0...1.37.0</tt></a></p> dani-garcia tag:github.com,2008:Repository/121898717/1.36.0 2026-05-03T13:02:37Z 1.36.0 <h2>Security Fixes</h2> <p>This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.</p> <ul> <li>SSO Login CSRF<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-pfp2-jhgq-6hg5">GHSA-pfp2-jhgq-6hg5</a><br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-w6h6-8r66-hcv7">GHSA-w6h6-8r66-hcv7</a></li> <li>User/Organization Enumeration<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-hxqh-ff5p-wfr3">GHSA-hxqh-ff5p-wfr3</a></li> <li>SSO existing-user binding<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-j4j8-gpvj-7fqr">GHSA-j4j8-gpvj-7fqr</a><br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6x5c-84vm-5j56">GHSA-6x5c-84vm-5j56</a></li> <li>SSRF via Icon Endpoint<br> <a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-72vh-x5jq-m82g">GHSA-72vh-x5jq-m82g</a></li> <li>Some crate's updated and other minor security enhancements</li> </ul> <p>These are private for now, pending CVE assignment.</p> <h2>Notes</h2> <ul> <li>Archiving of items is available<br> <a href="https://bitwarden.com/blog/keep-your-vault-tidy-with-item-archiving/" rel="nofollow">https://bitwarden.com/blog/keep-your-vault-tidy-with-item-archiving/</a><br> <a href="https://bitwarden.com/nl-nl/help/managing-items/#archive" rel="nofollow">https://bitwarden.com/nl-nl/help/managing-items/#archive</a></li> <li>Web Vault updated to v2026.4.1</li> </ul> <h2>What's Changed</h2> <ul> <li>SSO fallback to UserInfo preferred_username by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4322035872" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7128" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7128/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7128">#7128</a></li> <li>Dummy identifier need to pass for a guid by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4344241300" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7154" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7154/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7154">#7154</a></li> <li>add new /identity/accounts/prelogin/password by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4344502327" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7156" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7156/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7156">#7156</a></li> <li>Add DuckDuckGo browser device type by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4341655759" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7147" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7147/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7147">#7147</a></li> <li>Apply <code>duration_suboptimal_units</code> lint findings by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4337055080" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7144" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7144/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7144">#7144</a></li> <li>Apply <code>ref_option</code> lint findings by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4336827894" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7143" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7143/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7143">#7143</a></li> <li>Fix hardcoded sso identifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4344914731" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7157" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7157/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7157">#7157</a></li> <li>Update crates and fix a nightly lint by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353292904" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7161" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7161/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7161">#7161</a></li> <li>Fix Host/IP resolving by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353293367" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7162" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7162/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7162">#7162</a></li> <li>Several SSO Fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353293809" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7163" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7163/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7163">#7163</a></li> <li>Add support for archiving items by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matt-aaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matt-aaron">@matt-aaron</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4043119493" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6916" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6916/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6916">#6916</a></li> <li>Fix favicon fetching to check all icon links instead of just the first one by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Shocker/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Shocker">@Shocker</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4000964839" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6880" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6880/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6880">#6880</a></li> <li>Fix merge conflict by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4353544609" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7164" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7164/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7164">#7164</a></li> <li>Replace organization_uuid unwrap with proper error handling by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xjohnyknox/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xjohnyknox">@xjohnyknox</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4068217059" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6936" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6936/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6936">#6936</a></li> <li>fix: return Err instead of panic on unknown cipher atype in to_json() by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mango766/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mango766">@mango766</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4229962626" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7068" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7068/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7068">#7068</a></li> <li>Allow SQLite to be linked against dynamically by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ISSOtm/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ISSOtm">@ISSOtm</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4212505616" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7057" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7057/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7057">#7057</a></li> <li>Update crates and web-vault by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4359601860" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7171" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7171/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7171">#7171</a></li> <li>Update hickory by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4369460412" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7175" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7175/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7175">#7175</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matt-aaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matt-aaron">@matt-aaron</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4043119493" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6916" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6916/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6916">#6916</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Shocker/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Shocker">@Shocker</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4000964839" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6880" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6880/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6880">#6880</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xjohnyknox/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xjohnyknox">@xjohnyknox</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4068217059" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6936" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6936/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6936">#6936</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mango766/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mango766">@mango766</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4229962626" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7068" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7068/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7068">#7068</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ISSOtm/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ISSOtm">@ISSOtm</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4212505616" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7057" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7057/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7057">#7057</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.8...1.36.0"><tt>1.35.8...1.36.0</tt></a></p> <p>You can discuss this release here <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="9996054" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/discussions/7177" data-hovercard-type="discussion" data-hovercard-url="/dani-garcia/vaultwarden/discussions/7177/hovercard" href="https://github.com/dani-garcia/vaultwarden/discussions/7177">#7177</a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.8 2026-04-25T18:08:50Z 1.35.8 <h2>What's Changed</h2> <ul> <li>Dummy org Master password policy auth fix by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4263384720" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7097" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7097/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7097">#7097</a></li> <li>Fix recovery-code not working by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4270199459" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7102" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7102/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7102">#7102</a></li> <li>Fix invalid refresh token response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4277026476" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7105" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7105/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7105">#7105</a></li> <li>Update Rust, Crates, GHA and fix a DNS issue by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4283702582" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7108" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7108/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7108">#7108</a></li> <li>Update web-vault and crates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4308697550" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7121" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7121/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7121">#7121</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.7...1.35.8"><tt>1.35.7...1.35.8</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.7 2026-04-13T21:51:33Z 1.35.7 <h2>What's Changed</h2> <ul> <li>Fix 2FA for Android by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4257300386" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7093" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7093/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7093">#7093</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.6...1.35.7"><tt>1.35.6...1.35.7</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.6 2026-04-12T19:28:36Z 1.35.6 <h2>Notes</h2> <p>The previous release contained an issue where Two Factor Remember Tokens and Recovery Tokens were not accepted at all.<br> This has been fixed now in this release.</p> <h2>What's Changed</h2> <ul> <li>Fix MFA Remember by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4249305734" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7085" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7085/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7085">#7085</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6"><tt>1.35.5...1.35.6</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.5 2026-04-12T19:26:30Z 1.35.5 <h2>Security Fixes</h2> <p>This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.</p> <ul> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-937x-3j8m-7w7p">GHSA-937x-3j8m-7w7p</a> Unconfirmed Owner Can Purge Entire Organization Vault.</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-569v-845w-g82p">GHSA-569v-845w-g82p</a> Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6j4w-g4jh-xjfx">GHSA-6j4w-g4jh-xjfx</a> Refresh tokens not invalidated on security stamp rotation</li> </ul> <p>These are private for now, pending CVE assignment.</p> <h2>Notes</h2> <ul> <li>The admin templates have changed, please update them if you override these via templates.</li> <li>Two Factor Remember Tokens are now valid for max 30 days. Old tokens are invalid directly after upgrading.</li> </ul> <h2>What's Changed</h2> <ul> <li>apply policies only to confirmed members by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4019160468" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6892" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6892/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6892">#6892</a></li> <li>Feat(config): add feature flag for Safari account switching by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/DerPlayer2001/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/DerPlayer2001">@DerPlayer2001</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4016136925" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6891" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6891/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6891">#6891</a></li> <li>fix: add ForcePasswordReset to api key login by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montdidier/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montdidier">@montdidier</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4032066566" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6904" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6904/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6904">#6904</a></li> <li>Add Webauthn related origins flag to known flags. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pasarenicu/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pasarenicu">@pasarenicu</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4030438098" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6900" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6900/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6900">#6900</a></li> <li>Add 30s cache to SSO exchange_refresh_token by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Timshel/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Timshel">@Timshel</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3979308180" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6866" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6866/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6866">#6866</a></li> <li>Add cxp-import-mobile and cxp-export-mobile: feature flags on mobile by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/phoeagon/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/phoeagon">@phoeagon</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3969746107" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6853" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6853/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6853">#6853</a></li> <li>Misc updates and fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4035866691" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6910" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6910/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6910">#6910</a></li> <li>Support new desktop origin on CORS by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4047061071" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6920" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6920/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6920">#6920</a></li> <li>Fix <code>checkout</code> action version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4047166610" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6921" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6921/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6921">#6921</a></li> <li>Fix apikey login by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4047436562" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6922" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6922/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6922">#6922</a></li> <li>Fix email header base64 padding by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4088371827" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6961" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6961/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6961">#6961</a></li> <li>Update Feature Flags by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4113649308" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6981" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6981/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6981">#6981</a></li> <li>Update crates and GHA by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4113162680" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6980" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6980/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6980">#6980</a></li> <li>Use protected CI environment by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dani-garcia/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dani-garcia">@dani-garcia</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4123795467" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7004" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7004/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7004">#7004</a></li> <li>Fix 2FA Remember to actually be 30 days by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4058831988" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6929" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6929/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6929">#6929</a></li> <li>Misc Updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4163889911" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7027" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7027/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7027">#7027</a></li> <li>Switch to <code>attest</code> action by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4133585232" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7017" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7017/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7017">#7017</a></li> <li>Rotate refresh-tokens on sstamp reset by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4165737536" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7031" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7031/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7031">#7031</a></li> <li>Misc org fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4165765644" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7032" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7032/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7032">#7032</a></li> <li>Fix empty string FolderId by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4189621015" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7048" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7048/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7048">#7048</a></li> <li>Disable deployments for release env by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dfunkt/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dfunkt">@dfunkt</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4165921197" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7033" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7033/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7033">#7033</a></li> <li>Fix Send icons by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4195179723" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7051" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7051/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7051">#7051</a></li> <li>prevent managers from creating collections by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4012419564" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6890" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6890/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6890">#6890</a></li> <li>Change SQLite backup to use VACUUM INTO query by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/getaaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/getaaron">@getaaron</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4115922449" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6989" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6989/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6989">#6989</a></li> <li>Handle <code>SIGTERM</code> and <code>SIGQUIT</code> shutdown signals. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/0x484558/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/0x484558">@0x484558</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4130208407" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7008" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7008/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7008">#7008</a></li> <li>Do not display unavailable 2FA options by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/0x484558/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/0x484558">@0x484558</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4131127439" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7013" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7013/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7013">#7013</a></li> <li>Fix logout push identifiers and send logout before clearing devices by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/qaz741wsd856/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/qaz741wsd856">@qaz741wsd856</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4183993824" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7047" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7047/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7047">#7047</a></li> <li>Fix windows build issues by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/idontneedonetho/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/idontneedonetho">@idontneedonetho</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4224861481" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7065" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7065/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7065">#7065</a></li> <li>Crate and GHA updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4245455414" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7081" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7081/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7081">#7081</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/DerPlayer2001/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/DerPlayer2001">@DerPlayer2001</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4016136925" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6891" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6891/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6891">#6891</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montdidier/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montdidier">@montdidier</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4032066566" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6904" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6904/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6904">#6904</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pasarenicu/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pasarenicu">@pasarenicu</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4030438098" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6900" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6900/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6900">#6900</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/phoeagon/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/phoeagon">@phoeagon</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3969746107" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6853" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6853/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6853">#6853</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/getaaron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/getaaron">@getaaron</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4115922449" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6989" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6989/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6989">#6989</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/0x484558/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/0x484558">@0x484558</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4130208407" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7008" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7008/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7008">#7008</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/qaz741wsd856/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/qaz741wsd856">@qaz741wsd856</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4183993824" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7047" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7047/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7047">#7047</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/idontneedonetho/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/idontneedonetho">@idontneedonetho</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4224861481" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/7065" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/7065/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/7065">#7065</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5"><tt>1.35.4...1.35.5</tt></a></p> BlackDex tag:github.com,2008:Repository/121898717/1.35.4 2026-02-23T21:43:26Z 1.35.4 <h2>Security Fixes</h2> <p>This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.</p> <ul> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-w9f8-m526-h7fh">GHSA-w9f8-m526-h7fh</a>. This vulnerability would allow an attacker to access a cipher from a different user (fully encrypted) if they already know its internal UUID.</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h4hq-rgvh-wh27">GHSA-h4hq-rgvh-wh27</a>. This vulnerability allows an attacker with manager-level access within an organization to modify collections they can access, even if they do not have management permissions for them.</li> <li><a href="https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-r32r-j5jq-3w4m">GHSA-r32r-j5jq-3w4m</a>. This vulnerability allows an attacker with manager-level access within an organization to modify collections they are not assigned.</li> </ul> <p>These are private for now, pending CVE assignment.</p> <h2>What's Changed</h2> <ul> <li>Update Rust and Crates and GHA by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3954117795" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6843" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6843/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6843">#6843</a></li> <li>hide remember 2fa token by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/stefan0xC/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/stefan0xC">@stefan0xC</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3964335580" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6852" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6852/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6852">#6852</a></li> <li>fix(send_invite): invite links by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/proofofcopilot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/proofofcopilot">@proofofcopilot</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3935829504" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6824" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6824/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6824">#6824</a></li> <li>Misc organization fixes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/BlackDex/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/BlackDex">@BlackDex</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3980050194" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6867" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6867/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6867">#6867</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/proofofcopilot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/proofofcopilot">@proofofcopilot</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3935829504" data-permission-text="Title is private" data-url="https://github.com/dani-garcia/vaultwarden/issues/6824" data-hovercard-type="pull_request" data-hovercard-url="/dani-garcia/vaultwarden/pull/6824/hovercard" href="https://github.com/dani-garcia/vaultwarden/pull/6824">#6824</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/dani-garcia/vaultwarden/compare/1.35.3...1.35.4"><tt>1.35.3...1.35.4</tt></a></p> dani-garcia
For now, Differences are performed on text, not graphically, only the latest screenshot is available.
Screenshot requires a Content Fetcher ( Sockpuppetbrowser, selenium, etc ) that supports screenshots.