Public scan reportRepository
hashicorp/vault
Scanned on May 29, 2026
73
Risk score/ 100
High risk
Summary
HashiCorp Vault contains critical quantum-vulnerable cryptographic implementations, including SHA-1 in certificate authentication and widespread use of ECDSA/ECC for plugin authentication and certificate handling. These algorithms will be broken by quantum computers and require migration to post-quantum alternatives per NIST standards.
Critical
0
High
0
Medium
0
Low
0
Scan your own repository
Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.