azure-keyvault-secrets vulnerabilities
CVEs whose affected-version data names the azure-keyvault-secrets package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-88132Medium· 5.9Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Azure Key Vault Client SDKEPSS 0.32%via NVD
CVE-2026-85925High· 8.2Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
▾ Twilightmicrosoft · azure-keyvault-administrationEPSS 0.53%via NVD
CVE-2026-85922High· 7.4Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
▾ Twilightmicrosoft · azure-keyvault-administrationEPSS 0.61%via NVD