PasswordPusher

v2.7.2 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 1mo Secrets & Credentials

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

communicate-passwords docker encryption file-sharing information-technology msp

+12 more

netsec netsec-tools password password-expiration password-pusher password-safety ruby secret security security-tools self-hosted upload-file

Affected surfaces

deps

Summary

AI summary

Minor fixes and improvements.

Changes in this release

Type	Severity	Summary	CVE
Dependency
Dependency	Low	Bump googleauth from 1.16.2 to 1.17.0. Bump googleauth from 1.16.2 to 1.17.0. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump websocket-driver from 0.8.0 to 0.8.1. Bump websocket-driver from 0.8.0 to 0.8.1. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump oj from 3.17.1 to 3.17.3. Bump oj from 3.17.1 to 3.17.3. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump signet from 0.21.0 to 0.22.0. Bump signet from 0.21.0 to 0.22.0. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump bootsnap from 1.24.5 to 1.24.6. Bump bootsnap from 1.24.5 to 1.24.6. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump json from 2.19.7 to 2.19.8. Bump json from 2.19.7 to 2.19.8. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump psych from 5.3.1 to 5.4.0. Bump psych from 5.3.1 to 5.4.0. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump google-apis-core from 1.0.2 to 1.1.0. Bump google-apis-core from 1.0.2 to 1.1.0. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump faraday-net_http from 3.4.3 to 3.4.4. Bump faraday-net_http from 3.4.3 to 3.4.4. Source: llm_adapter@2026-06-05 Confidence: high	—
Dependency	Low	Bump aws-sdk-s3 from 1.224.0 to 1.225.0. Bump aws-sdk-s3 from 1.224.0 to 1.225.0. Source: llm_adapter@2026-06-05 Confidence: high	—

Full changelog

:memo: What’s Changed

:arrow_up: Dependencies updates

:arrow_up: Bump googleauth from 1.16.2 to 1.17.0 (#4530) @dependabot[bot]
:arrow_up: Bump websocket-driver from 0.8.0 to 0.8.1 (#4533) @dependabot[bot]
:arrow_up: Bump oj from 3.17.1 to 3.17.3 (#4532) @dependabot[bot]
:arrow_up: Bump signet from 0.21.0 to 0.22.0 (#4531) @dependabot[bot]
:arrow_up: Bump bootsnap from 1.24.5 to 1.24.6 (#4526) @dependabot[bot]
:arrow_up: Bump json from 2.19.7 to 2.19.8 (#4527) @dependabot[bot]
:arrow_up: Bump psych from 5.3.1 to 5.4.0 (#4522) @dependabot[bot]
:arrow_up: Bump google-apis-core from 1.0.2 to 1.1.0 (#4523) @dependabot[bot]
:arrow_up: Bump faraday-net_http from 3.4.3 to 3.4.4 (#4525) @dependabot[bot]
:arrow_up: Bump aws-sdk-s3 from 1.224.0 to 1.225.0 (#4520) @dependabot[bot]
:arrow_up: Bump madmin from 2.3.2 to 2.3.3 (#4521) @dependabot[bot]
:arrow_up: Bump aws-sdk-kms from 1.128.0 to 1.129.0 (#4519) @dependabot[bot]

:busts_in_silhouette: List of contributors

@dependabot[bot] and dependabot[bot]

:motor_boat: Docker Images

Available on Docker Hub:
https://hub.docker.com/r/pglombardo/pwpush

:running_man: Run This Version

Point DNS to your server (e.g. pwpush.example.com).
Download docker-compose.yml or clone the repo.
In docker-compose.yml, uncomment and set:
- TLS_DOMAIN: 'pwpush.example.com' for automatic Let’s Encrypt TLS.
Run:

docker compose up -d

Open https://pwpush.example.com or alternatively http://your-ip:5100.

:link: Useful Links

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track PasswordPusher

Get notified when new releases ship.

About PasswordPusher

Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

All releases →