Skip to content
OpenAdvisories

Vendor

tuist

2 known vulnerabilities.

Products

tuist 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-44679

    Tuist: Forgot password flow lacks throttling for reset email delivery

    Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for a known account without server-side throttling. In self-hosted deployments, thi…

    tuist tuist