StefanSA/vaultwarden-plus
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases 12 Packages 1 Wiki Activity Actions
12 releases 12 tags
  • v1.36.4 a402004edd

    Vaultwarden-Plus v1.36.4
    All checks were successful
    auto-image-build / docker-build (push) Successful in 21m36s
    Details
    ci / rust-checks (push) Successful in 2m43s
    Details
    validate-publish-surface / validate-publish-surface (push) Successful in 3s
    Details
    Stable

    StefanSA released this 2026-07-11 15:41:40 +02:00 | 7 commits to main since this release

    Vaultwarden-Plus v1.36.4

    Security maintenance release for the Send Email Verification OTP flow.

    Security Fix

    • Added Send Email Verification OTP brute-force protection.
    • Enforced a persisted per-challenge attempt limit.
    • Made verification atomic and single-use so a successful OTP cannot be replayed.
    • Added IP-based rate limiting for OTP issuance and verification.
    • Blocked resend after a challenge has exhausted its allowed attempts.
    • No unrelated feature changes are included in this release.

    Validation

    • Released from validated commit a402004edd4ea8d452b60e2080c43222ebce680e.
    • Rust validation and focused Send Email OTP regression coverage completed before release.
    • Release image promoted from the successful CI image for the validated commit; no second full Docker build was run for release publication.
    Downloads