Vaultwarden (<= 1.37.3)

Vaultwarden versions 1.37.3 and earlier fail to validate organization membership status, allowing revoked or pending members to retain unauthorized access to sensitive cipher data.