2 known security vulnerabilities
- moderateGHSA-4fwj-m62q-pp47(CVE-2024-56733)
Password Pusher Allows Session Token Interception Leading to Potential Hijacking
Show 1 more vulnerabilityShow fewer vulnerabilities1 low
- lowGHSA-ffp2-8p2h-4m5j(CVE-2024-52796)
Password Pusher rate limiter can be bypassed by forging proxy headers
Links to passwords expire after a certain number of views and/or time has passed. Hosted at pwpush.com but you can also easily run your own instance internally or on Heroku with just a few steps.
Required Ruby Version
>= 0
Authors
Peter Giacomo Lombardo
Versions
-
0.1.0
-
source
- 0.1.0 source September 16, 2016 (444 KB) vulnerable
-