github.com/openbao/openbao/sdk/v2 vulnerabilities
CVEs whose affected-version data names the github.com/openbao/openbao/sdk/v2 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115358Low· 2.0OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters
OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attackers can submit requests with malformed TypeKVPair or TypeHea…
▾ Sunlitopenbao · openbaoEPSS 0.19%via CVEORG
CVE-2025-52893Medium· 4.5OpenBao Inserts Sensitive Information into Log File when processing malformed data
OpenBao Inserts Sensitive Information into Log File when processing malformed data
▾ Sunlitopenbao · github.com/openbao/openbao/sdk/v2EPSS 0.33%via OSV