pwpush vulnerabilities (RubyGems)

2 vulnerabilities.

• pwpush RubyGems Password Pusher Allows Session Token Interception Leading to Potential Hijacking CVE-2024-56733 5.7 MediumDecember 30, 2024
• pwpush RubyGems Password Pusher's rate limiter can be bypassed by forging proxy headers CVE-2024-52796 Fix available 5.3 MediumNovember 20, 2024