Skip to content

Comments

fix(container): update image vaultwarden/server ( 1.35.3 → 1.35.4 )#2823

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/vaultwarden-server-1.x
Open

fix(container): update image vaultwarden/server ( 1.35.3 → 1.35.4 )#2823
renovate[bot] wants to merge 1 commit intomainfrom
renovate/vaultwarden-server-1.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 24, 2026

This PR contains the following updates:

Package Update Change
vaultwarden/server patch 1.35.31.35.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

dani-garcia/vaultwarden (vaultwarden/server)

v1.35.4

Compare Source

Security Fixes

This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.

  • GHSA-w9f8-m526-h7fh. This vulnerability would allow an attacker to access a cipher from a different user (fully encrypted) if they already know its internal UUID.
  • GHSA-h4hq-rgvh-wh27. This vulnerability allows an attacker with manager-level access within an organization to modify collections they can access, even if they do not have management permissions for them.
  • GHSA-r32r-j5jq-3w4m. This vulnerability allows an attacker with manager-level access within an organization to modify collections they are not assigned.

These are private for now, pending CVE assignment.

What's Changed

New Contributors

Full Changelog: dani-garcia/vaultwarden@1.35.3...1.35.4


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package            | from   | to     |
| ---------- | ------------------ | ------ | ------ |
| docker     | vaultwarden/server | 1.35.3 | 1.35.4 |
@mglants-bot
Copy link

mglants-bot bot commented Feb 24, 2026

--- kubernetes/subterra/apps/apps/vaultwarden/app Kustomization: flux-system/cluster-apps-vaultwarden HelmRelease: apps/vaultwarden

+++ kubernetes/subterra/apps/apps/vaultwarden/app Kustomization: flux-system/cluster-apps-vaultwarden HelmRelease: apps/vaultwarden

@@ -41,13 +41,13 @@

     envFrom:
     - secretRef:
         name: vaultwarden-secret
     image:
       pullPolicy: IfNotPresent
       repository: vaultwarden/server
-      tag: 1.35.3
+      tag: 1.35.4
     ingress:
       main:
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-prod
           external-dns.alpha.kubernetes.io/target: ingress.ur30.ru
         enabled: true

@mglants-bot
Copy link

mglants-bot bot commented Feb 24, 2026

--- HelmRelease: apps/vaultwarden Deployment: apps/vaultwarden

+++ HelmRelease: apps/vaultwarden Deployment: apps/vaultwarden

@@ -27,13 +27,13 @@

       serviceAccountName: default
       automountServiceAccountToken: true
       dnsPolicy: ClusterFirst
       enableServiceLinks: true
       containers:
       - name: vaultwarden
-        image: vaultwarden/server:1.35.3
+        image: vaultwarden/server:1.35.4
         imagePullPolicy: IfNotPresent
         env:
         - name: DATABASE_URL
           valueFrom:
             secretKeyRef:
               key: uri

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants