SUSE · Security update for bugwarden
Affects SUSESource GCVE Database
Fixed in SUSE package updates : update SUSE when convenient.
Data as of 26 Oct 2026, 16:19 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 0.5.0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| SUSE Product Security Team SUSE | Affected
| Fixed in– |
AI-suggested
A fixed version is available in bugwarden 0.5.0 which includes the security update. Users should upgrade to this version to address the denial of service vulnerability and benefit from improved authentication and operational handling. No additional mitigation actions are indicated beyond applying this update.
Description
This security update for bugwarden version 0.5.0 addresses multiple improvements including environment-based configuration for allowed hosts and authentication headers, enforcement of bearer token authentication on HTTP transport, enhanced audit and diagnostics export to OTLP collectors, and graceful container shutdown handling. Additionally, it updates the vendored h2 library to version 0.4.16 to fix a denial of service vulnerability related to unbounded empty DATA frames. The update also includes documentation improvements for OpenTelemetry collector usage.