Pglombardo Passwordpusher
7 CVEs affecting Pglombardo Passwordpusher. Latest disclosed: 2026-09-09. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-87816 | High | 7.5 | 2026-09-09 | PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass e… |
CVE-2026-61458 | High | 7.5 | 2026-07-13 | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push loc… |
CVE-2024-51989 | High | 7.1 | 2024-11-07 | Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in t… |
CVE-2026-41308 | Medium | 6.5 | 2026-05-08 | Password Pusher is an open source application to communicate sensitive information over the web. Prior to versions 1.69.3 and 2.4.2, a security issue in OSS Pa… |
CVE-2024-56733 | Medium | 5.7 | 2024-12-30 | Password Pusher is an open source application to communicate sensitive information over the web. A vulnerability has been reported in versions 1.50.3 and prior… |
CVE-2024-52796 | Medium | 5.3 | 2024-11-20 | Password Pusher, an open source application to communicate sensitive information over the web, comes with a configurable rate limiter. In versions prior to v1… |
CVE-2026-62382 | | 2026-08-22 | PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic. The ownership check compares @push… |