CVE-2026-44679
Vulnerability Description
Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for a known account without server-side throttling. In self-hosted deployments, this can be abused to send large volumes of unwanted email and consume downstream email delivery resources. This vulnerability is fixed in 1.180.10.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-770
Source
NVD
Vendor
tuist
Product
tuist
Discussion (0)
Add Comment
No comments yet. Be the first!