Vulnerability index

Browse CVEs

19 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Pyload Ng MEDIUM 6.5
CVE-2026-42314

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, package folder names are sanitized using insufficient s…

Fix: 0.5.0b3.dev100+
Fix from $1,600 2026-05-11
Pyload Ng MEDIUM 6.5
CVE-2026-42315

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, when passing a folder name in the set_package_data() AP…

Fix: 0.5.0b3.dev100+
Fix from $1,600 2026-05-11
Pyload Ng HIGH 8.3
CVE-2026-42313

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SE…

Fix: 0.5.0b3.dev100+
Fix from $1,950 2026-05-11
Pyload Ng MEDIUM 6.8
CVE-2026-42312

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SE…

Fix: 0.5.0b3.dev100+
Fix from $1,600 2026-05-11
Pyload Ng MEDIUM 6.8
CVE-2026-35586

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the ADMIN_ONLY_CORE_OPTIONS authorization set in set_con…

Fix: after 0.5.0b3.dev96
Fix from $1,600 2026-04-07
Pyload Ng MEDIUM 6.5
CVE-2026-35592

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the _safe_extractall() function in src/pyload/plugins/ex…

Fix: after 0.5.0b3.dev96
Fix from $1,600 2026-04-07
Pyload Ng HIGH 8.8
CVE-2026-35463

pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the ADMIN_ONLY_OPTIONS protection mechanism restri…

Fix: after 0.5.0b3.dev96
Fix from $1,950 2026-04-07
Pyload Ng CRITICAL 9.1
CVE-2026-35459

pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, pyLoad has a server-side request forgery (SSRF) vu…

Fix: 0.5.0b3.dev97+
Fix from $2,300 2026-04-06
Pyload Ng HIGH 7.7
CVE-2026-35187

pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the parse_urls API function in src/pyload/core/api…

Fix: 0.5.0b3.dev97+
Fix from $1,950 2026-04-06
Pyload Ng CRITICAL 9.8
CVE-2026-33511

pyLoad is a free and open-source download manager written in Python. From version 0.4.20 to before version 0.5.0b3.dev97, the local_check decorator i…

Fix: 0.5.0b3.dev97+
Fix from $2,300 2026-03-24
Pyload Ng HIGH 8.8
CVE-2026-33509

pyLoad is a free and open-source download manager written in Python. From version 0.4.0 to before version 0.5.0b3.dev97, the set_config_value() API e…

Fix: 0.5.0b3.dev97+
Fix from $1,950 2026-03-24
Pyload Ng MEDIUM 6.5
CVE-2026-33314

pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, a Host Header Spoofing vulnerability in the @loc…

Fix: 0.5.0b3.dev97+
Fix from $1,600 2026-03-24
Pyload Ng HIGH 8.1
CVE-2026-32808

pyLoad is a free and open-source download manager written in Python. Versions before 0.5.0b3.dev97 are vulnerable to path traversal during password v…

Fix: 0.5.0b3.dev97+
Fix from $1,950 2026-03-20
Pyload Ng MEDIUM 6.5
CVE-2026-29778

pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the edit_package() function impleme…

Fix: 0.5.0b3.dev97+
Fix from $1,600 2026-03-07
Pyload Ng CRITICAL 9.8
CVE-2025-54802

pyLoad is the free and open-source Download Manager written in pure Python. In versions 0.5.0b3.dev89 and below, there is an opportunity for path tra…

Patch available
Fix from $2,300 2025-08-05
Pyload Ng HIGH 8.8
CVE-2024-22416

pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` API allows any API call to be made using GET requests. Since t…

Fix: 0.5.0b3.dev78+
Fix from $1,950 2024-01-18
Pyload Ng HIGH 7.4
CVE-2023-0509

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.

Fix: 0.5.0b3.dev44 / 2023-01-25+
Fix from $1,950 2023-01-26
Pyload Ng MEDIUM 5.4
CVE-2023-0488

Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42.

Fix: 0.5.0b3.dev42 / 2023-01-24+
Fix from $1,600 2023-01-26
Pyload Ng MEDIUM 6.1
CVE-2023-0057

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33.

Fix: 0.5.0b3.dev33 / 2023-01-05+
Fix from $1,600 2023-01-05