medium6.9
CVE-2026-44679
Tuist is a virtual platform team for Swift app devs.
Impact
Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for a known account without server-side throttling. In self-hosted deployments, this can be abused to send large volumes of unwanted email and consume downstream email delivery resources. This vulnerability is fixed in 1.180.10.
Affected products
| Product | Affected versions |
|---|---|
| Tuist Is A Virtual Platform Team For Swift App Devs. | before 1.180.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.