Skip to content
OpenAdvisories

Vendor

tuist

2 known vulnerabilities.

Products

tuist 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-44678

    Tuist: IDOR in preview deletion API allows cross-tenant deletion of any preview by UUID

    Tuist is a virtual platform team for Swift app devs. In 1.180.8 and earlier, the DELETE /api/projects/{account_handle}/{project_handle}/previews/{preview_id} endpoint loads the preview by its UUID without verifying that the preview belongs to the project reso…

    tuist tuist