Browse CVEs

MEDIUM 6.5 CVE-2026-42314 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, package folder names are sanitized using insufficient s… Pyload Ng 0.5.0b3.dev100+ Fix from $1,6002026-05-11 MEDIUM 6.5 CVE-2026-42315 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, when passing a folder name in the set_package_data() AP… Pyload Ng 0.5.0b3.dev100+ Fix from $1,6002026-05-11 HIGH 8.3 CVE-2026-42313 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SE… Pyload Ng 0.5.0b3.dev100+ Fix from $1,9502026-05-11 MEDIUM 6.8 CVE-2026-42312 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SE… Pyload Ng 0.5.0b3.dev100+ Fix from $1,6002026-05-11 MEDIUM 6.8 CVE-2026-35586 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the ADMIN_ONLY_CORE_OPTIONS authorization set in set_con… Pyload Ng after 0.5.0b3.dev96 Fix from $1,6002026-04-07 MEDIUM 6.5 CVE-2026-35592 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the _safe_extractall() function in src/pyload/plugins/ex… Pyload Ng after 0.5.0b3.dev96 Fix from $1,6002026-04-07 HIGH 8.8 CVE-2026-35463 pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the ADMIN_ONLY_OPTIONS protection mechanism restri… Pyload Ng after 0.5.0b3.dev96 Fix from $1,9502026-04-07 CRITICAL 9.1 CVE-2026-35459 pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, pyLoad has a server-side request forgery (SSRF) vu… Pyload Ng 0.5.0b3.dev97+ Fix from $2,3002026-04-06 HIGH 7.7 CVE-2026-35187 pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the parse_urls API function in src/pyload/core/api… Pyload Ng 0.5.0b3.dev97+ Fix from $1,9502026-04-06 CRITICAL 9.8 CVE-2026-33511 pyLoad is a free and open-source download manager written in Python. From version 0.4.20 to before version 0.5.0b3.dev97, the local_check decorator i… Pyload Ng 0.5.0b3.dev97+ Fix from $2,3002026-03-24 HIGH 8.8 CVE-2026-33509 pyLoad is a free and open-source download manager written in Python. From version 0.4.0 to before version 0.5.0b3.dev97, the set_config_value() API e… Pyload Ng 0.5.0b3.dev97+ Fix from $1,9502026-03-24 MEDIUM 6.5 CVE-2026-33314 pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, a Host Header Spoofing vulnerability in the @loc… Pyload Ng 0.5.0b3.dev97+ Fix from $1,6002026-03-24 HIGH 8.1 CVE-2026-32808 pyLoad is a free and open-source download manager written in Python. Versions before 0.5.0b3.dev97 are vulnerable to path traversal during password v… Pyload Ng 0.5.0b3.dev97+ Fix from $1,9502026-03-20 MEDIUM 6.5 CVE-2026-29778 pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the edit_package() function impleme… Pyload Ng 0.5.0b3.dev97+ Fix from $1,6002026-03-07 CRITICAL 9.8 CVE-2025-54802 pyLoad is the free and open-source Download Manager written in pure Python. In versions 0.5.0b3.dev89 and below, there is an opportunity for path tra… Pyload Ng Patch available Fix from $2,3002025-08-05 HIGH 8.8 CVE-2024-22416 pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` API allows any API call to be made using GET requests. Since t… Pyload Ng 0.5.0b3.dev78+ Fix from $1,9502024-01-18 HIGH 7.4 CVE-2023-0509 Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44. Pyload Ng 0.5.0b3.dev44 / 2023-01-25+ Fix from $1,9502023-01-26 MEDIUM 5.4 CVE-2023-0488 Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42. Pyload Ng 0.5.0b3.dev42 / 2023-01-24+ Fix from $1,6002023-01-26 MEDIUM 6.1 CVE-2023-0057 Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33. Pyload Ng 0.5.0b3.dev33 / 2023-01-05+ Fix from $1,6002023-01-05