GHSA-h265-g7rm-h337 (Publication in process, waiting for CVE assignment) This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong
GHSA-h265-g7rm-h337 (Publication in process, waiting for CVE assignment) This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong
one thing I’m not willing to self host is vault/bitwarden. My whole life is based in my password manager. I imagine Bitwarden inc has a lot better security than me, and if I lose access to it I’m stuffed.
Bitwarden was the second thing I ever self hosted. On a local server on a UPS and hasn’t really been an issue across 7 years. Every so often I save an encrypted JSON on my main laptop to use with keepass if there’s ever an issue where the server is down for a while.
What are they going to get an encrypted blob.
Had this exact thing happen to me. I was hosting vaultwarden on a raspberry pi and then it fell over. My client devices had caged versions of my vault, but I couldn’t make changes to it. I quickly moved over to Bitwarden and it’s been fantastic.
yup, BW is awesome. and mostly free. I use BW too, but not self hosted.