Hi,
The CVE-2026-34986 was fixed as part of the commit Backport [VAULT-43813] go: resolve CVE-2026-34986 and GHSA-78h2-9frx-… · hashicorp/vault@58d7286 · GitHub . However, this is not available as a release version, without which we cannot update our go module dependencies to pull in the changes.
While the version v2.0.0 was released for hashicorp/vault, we need a similar new release version for hashicorp/vault/api.
May I please know when this can be made available?