← All credits
Sanjok Karki
9 vulnerability records and advisories credit this contributor.
CVE-2026-101878
Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation
CVE-2026-71959
Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collect
CVE-2026-60104
Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request
CVE-2026-57522
Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates
CVE-2026-57521
Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController
CVE-2026-57520
Bitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint
CVE-2026-43640
Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key
CVE-2026-43639
Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients
CVE-2026-43638
Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import