Vulnerability Reporthashicorp/vault:1.14.10

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker able to reach the Vault API could cause a denial of service via crafted query parameters (CVE-2025-61726) or bypass IP-based access controls if IPv4-mapped IPv6 classification is used (CVE-2024-24790). The image has 134 exposed vulnerabilities, including 39 rated >=6 and 2 rated >=7, although the 25 post-exploit findings are all low severity. Note that CVE-2024-24790 is only relevant if Vault uses the affected IP classification for access decisions, while CVE-2025-61726 affects the default HTTP request parsing path. Restrict network access to the Vault listener and apply strict request size limits to reduce exposure to these issues.