Pglombardo Passwordpusher
5 CVEs affecting Pglombardo Passwordpusher. Latest disclosed: 2026-07-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-61458 | High | 7.5 | 2026-07-13 | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push loc… |
CVE-2024-51989 | High | 7.1 | 2024-11-07 | Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in t… |
CVE-2026-41308 | Medium | 6.5 | 2026-05-08 | Password Pusher is an open source application to communicate sensitive information over the web. Prior to versions 1.69.3 and 2.4.2, a security issue in OSS Pa… |
CVE-2024-56733 | Medium | 5.7 | 2024-12-30 | Password Pusher is an open source application to communicate sensitive information over the web. A vulnerability has been reported in versions 1.50.3 and prior… |
CVE-2024-52796 | Medium | 5.3 | 2024-11-20 | Password Pusher, an open source application to communicate sensitive information over the web, comes with a configurable rate limiter. In versions prior to v1… |