v2.0.0
2026-04-15T08:52:14Z•755148889b4f4653784a1df14b0ff805427f2f9f11a93e5deb5d2ef1a94dab79
CVE-2026-34986GHSA-78h2-9frx-2jm8VAULT-43813auth-modulesbackporthashicorpreleasesdksdk-v0.25.1securityv2.0.0v2.0.0-rc1vault
What happened
HashiCorp Vault releases: official v2.0.0 (and v2.0.0-rc1) were published, and sdk/v0.25.1 was released to backport a security fix resolving CVE-2026-34986 (GitHub advisory GHSA-78h2-9frx-2jm8). The sdk release message explicitly references the backport of VAULT-43813 to address the advisory. Multiple auth-related subpackage releases (ldap, kubernetes, gcp, azure, aws, approle, userpass) and release artifacts were also published in March–April 2026.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hashicorp_vault_releases
- Record identifier
- 755148889b4f4653784a1df14b0ff805427f2f9f11a93e5deb5d2ef1a94dab79
- Enrichment time
- 2026-04-15T08:52:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.