Pglombardo vulnerabilities
We track 3 vulnerabilities in Pglombardo products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2026.
Latest Pglombardo vulnerabilities
- 7.5 High severity
PasswordPusher: Concurrent Execution using Shared Resource with Improper Synchronization
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire_after_views limits. Attackers can send concurrent requests to the show endpoint to access one-t
- 7.5 High severity
PasswordPusher: Improper Restriction of Excessive Authentication Attempts
PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. Attackers who know a push token can systematically guess passphrases at 120 attempts
- 7.1 High severity
PasswordPusher: Improper Neutralization of Input During Web Page Generation
Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in the PasswordPusher application, affecting versions `v1.41.1` through and including `v.1.48.0`. The iss