German BSI Project CAOS security issues

[clemone210]

Hi there,
I could not find any specific discussions or issues within this repo, so Id like to ask if the security concerns raised by the German BSI project CAOS have already been addressed?
Could you provide some information on this?

https://www.bsi.bund.de/DE/Service-Navi/Publikationen/Studien/Projekt_P486/projekt_P486_node.html
Vaultwarden-Passwortmanager.pdf

[BlackDex]

All issues are already fixed, you can find the reported CVE's here:
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Vaultwarden

And you can find them in our repo here:
https://github.com/dani-garcia/vaultwarden/pulls?q=is%3Apr+cve+mitre+is%3Aclosed+

Also some none-cve reported issues were addressed.

[clemone210]

Thanks for the quick reply.
I didn't look for those search parameters, thanks for pointing them out!