CyberSecBulletin

Kyndryl-open-source vulnerabilities

We track 1 vulnerability in Kyndryl-open-source products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2026.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest Kyndryl-open-source vulnerabilities

  • 8.7 High severity

    hashi-vault-js: Relative Path Traversal

    CVE-2026-55100Kyndryl-open-source

    hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of usin