Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: smp46 Clear all filters
TI-2026-70531 CVE-2026-108163 · GHSA-2x75-qffm-gvv9

Ineffective authentication rate limiting in Pingvin Share X

Priority LOW 36

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00217 Published 2026-10-10 Fixed in 1.22.0 CWE-307
TI-2026-70530 CVE-2026-108162 · GHSA-3chq-cx7h-2cfx

Rate limit bypass in Pingvin Share X via spoofed X-Forwarded-For

Priority LOW 38

Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00183 Published 2026-10-10 Fixed in 1.22.0 CWE-348
TI-2026-70100 CVE-2026-108157

Account takeover in Pingvin Share X via OAuth email linking

Priority MEDIUM 48

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.sign…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00535 Published 2026-10-09 Fixed in 1.22.0 CWE-287