kyndryl-open-source hashi-vault-js

• CVE-2026-55102 Medium 5.8 hashi-vault-js: Vault token and secret values exposed in thrown errors 0.2%
• CVE-2026-55100 High 8.7 hashi-vault-js has a path traversal and query parameter injection 0.6%