Skip to content
OpenAdvisories

Vendor

typemill

6 known vulnerabilities.

Products

typemill 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-71213

    typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Force

    Typemill's login endpoint (POST /tm/login, ControllerWebAuth::login) performs no rate-limiting, failed-attempt counting, or account lockout when captcha is disabled, which is the default configuration. An unauthenticated attacker can send unlimited password-g…

    typemill typemill