PasswordPusher

v2.9.3 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 17d Secrets & Credentials

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

communicate-passwords docker encryption file-sharing information-technology msp

+12 more

netsec netsec-tools password password-expiration password-pusher password-safety ruby secret security security-tools self-hosted upload-file

Affected surfaces

auth

Summary

AI summary

Minor fixes and improvements.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Enable Permissions-Policy security headers Enable Permissions-Policy security headers Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency
Dependency	Low	Bump aws-sdk-core from 3.252.0 to 3.253.0 Bump aws-sdk-core from 3.252.0 to 3.253.0 Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency	Low	Bump lograge from 0.14.0 to 0.15.0 Bump lograge from 0.14.0 to 0.15.0 Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency	Low	Bump terser from 1.2.7 to 1.2.8 Bump terser from 1.2.7 to 1.2.8 Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency	Low	Bump aws-partitions from 1.1265.0 to 1.1266.0 Bump aws-partitions from 1.1265.0 to 1.1266.0 Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency	Low	Bump google-cloud-env from 2.3.1 to 2.4.0 Bump google-cloud-env from 2.3.1 to 2.4.0 Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency	Low	Bump tilt from 2.7.0 to 2.8.0 Bump tilt from 2.7.0 to 2.8.0 Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

:memo: What’s Changed

Enable Permissions-Policy security headers (#4621) @pglombardo

:arrow_up: Dependencies updates

:arrow_up: Bump aws-sdk-core from 3.252.0 to 3.253.0 (#4626) @dependabot[bot]
:arrow_up: Bump lograge from 0.14.0 to 0.15.0 (#4627) @dependabot[bot]
:arrow_up: Bump terser from 1.2.7 to 1.2.8 (#4628) @dependabot[bot]
:arrow_up: Bump aws-partitions from 1.1266.0 to 1.1267.0 (#4624) @dependabot[bot]
:arrow_up: Bump google-cloud-env from 2.3.1 to 2.4.0 (#4625) @dependabot[bot]
:arrow_up: Bump tilt from 2.7.0 to 2.8.0 (#4622) @dependabot[bot]
:arrow_up: Bump aws-partitions from 1.1265.0 to 1.1266.0 (#4623) @dependabot[bot]

:busts_in_silhouette: List of contributors

@dependabot[bot], @pglombardo and dependabot[bot]

:motor_boat: Docker Images

Available on Docker Hub:
https://hub.docker.com/r/pglombardo/pwpush

:running_man: Run This Version

Point DNS to your server (e.g. pwpush.example.com).
Download docker-compose.yml or clone the repo.
In docker-compose.yml, uncomment and set:
- TLS_DOMAIN: 'pwpush.example.com' for automatic Let’s Encrypt TLS.
Run:

docker compose up -d

Open https://pwpush.example.com or alternatively http://your-ip:5100.

:link: Useful Links

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track PasswordPusher

Get notified when new releases ship.

About PasswordPusher

Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

All releases →