Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: smp46 pingvin-share-x — GitHub Security Advisory (GHSA-7gx2-g6x2-7mjg) Clear all filters
TI-2026-70531 CVE-2026-108163 · GHSA-2x75-qffm-gvv9

Ineffective authentication rate limiting in Pingvin Share X

Priority LOW 36

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00217 Published 2026-10-10 Fixed in 1.22.0 CWE-307
TI-2026-70530 CVE-2026-108162 · GHSA-3chq-cx7h-2cfx

Rate limit bypass in Pingvin Share X via spoofed X-Forwarded-For

Priority LOW 38

Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00183 Published 2026-10-10 Fixed in 1.22.0 CWE-348