Browse / Bitwarden

Bitwarden

See its reports on the map

Attack surface: 77 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Bitwarden

• Authentication2
• Business Logic2
• Server-Side Request Forgery2
• Information Disclosure2
• Misconfiguration1
• Other weaknesses1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Export vault feature is vulnerable to CSV injectionInformativeOS Command Injection
   2 votes