pyload

Records50All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

pyload records in CISA KEV

No pyload vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pyload 23 records CRITICAL

Records

50 records

TI-2023-00282 CVE-2023-0297 · GHSA-pf38-5p22-x6h6

Code Injection in pyload/pyload

CRITICAL 93

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95915 Published 2023-01-14 Fixed in 0.5.0b3.dev31 CWE-94

TI-2025-34556 CVE-2025-54802 · GHSA-48rp-jc79-2264

pyLoad CNL Blueprint is vulnerable to Path Traversal through `dlc_path` leading to Remote Code Execution (RCE)

HIGH 82

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0139 Published 2025-08-05 Fixed in 0.5.0b3.dev90 CWE-22

TI-2025-33765 CVE-2025-53890 · GHSA-8w3f-4r8f-pf53

pyLoad vulnerable to remote code execution through js2py onCaptchaResult

HIGH 82

pyload is an open-source Download Manager written in pure Python.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01298 Published 2025-07-14 Fixed in 0.5.0b3.dev89, 0.20 CWE-94

TI-2023-00412 CVE-2023-0435 · GHSA-6jmx-pv77-wm5w

Excessive Attack Surface in pyload/pyload

HIGH 82

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00747 Published 2023-01-22 Fixed in 0.5.0b3.dev41 CWE-1125

TI-2026-27589 CVE-2026-35459 · GHSA-7gvf-3w72-p2pg

pyLoad has SSRF fix bypass via HTTP redirect

HIGH 81

pyLoad is a free and open-source download manager written in Python.

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00284 Published 2026-04-06 No fix listed CWE-918

TI-2026-26332 CVE-2026-33992 · GHSA-m74m-f7cr-432x

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

HIGH 81

pyLoad is a free and open-source download manager written in Python.

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00404 Published 2026-03-27 Fixed in 0.5.0b3.dev97 CWE-918

TI-2026-25907 CVE-2026-33511

pyload-ng: Authentication Bypass via Host Header Injection in ClickNLoad

HIGH 77

pyLoad is a free and open-source download manager written in Python.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00438 Published 2026-03-24 Fixed in 0.5.0b3.dev97 CWE-639

TI-2025-06698 CVE-2025-7346 · GHSA-x698-5hjm-w2m5

Improper access control in Pyload

HIGH 77

Any unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packages

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00376 Published 2025-07-08 No fix listed CWE-281

TI-2025-34838 CVE-2025-55156 · GHSA-pwh4-6r3m-j2rf

PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

HIGH 75

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00363 Published 2025-08-11 Fixed in 0.5.0b3.dev91 CWE-89

TI-2024-32088 CVE-2024-47821 · GHSA-w7hq-f2pj-c53g

pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API

HIGH 74

pyLoad is a free and open-source Download Manager.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00682 Published 2024-10-25 Fixed in 0.5.0b3.dev87 CWE-78

TI-2026-29761 CVE-2026-41133 · GHSA-66hx-chf7-3332

pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)

HIGH 73

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00325 Published 2026-04-21 No fix listed CWE-613

TI-2026-27593 CVE-2026-35463 · GHSA-w48f-wwwf-f5fr

pyLoad has Improper Neutralization of Special Elements used in an OS Command

HIGH 73

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00847 Published 2026-04-07 No fix listed CWE-78

TI-2026-25905 CVE-2026-33509 · GHSA-r7mc-x6x7-cqxx

pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration

HIGH 73

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0055 Published 2026-03-24 Fixed in 0.5.0b3.dev97 CWE-269

TI-2025-35636 CVE-2025-57751 · GHSA-9gjj-6gj7-c4wj

Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs

HIGH 73

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00325 Published 2025-08-21 Fixed in 0.5.0b3.dev92 CWE-400

TI-2023-25985 CVE-2023-47890 · GHSA-h73m-pcfw-25h2

pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.

HIGH 73

pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01058 Published 2024-01-08 Fixed in 0.5.0b3.dev75 CWE-22

TI-2026-30621 CVE-2026-42313 · GHSA-pg67-9wjv-mr85

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy

HIGH 71

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00396 Published 2026-05-11 Fixed in 0.5.0b3.dev100 CWE-441

TI-2025-38166 CVE-2025-61773 · GHSA-cjjf-27cc-pvmv

pyLoad CNL and captcha handlers allow code Injection via unsanitized parameters

HIGH 70

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00517 Published 2025-10-09 Fixed in 0.5.0b3.dev91 CWE-116

TI-2026-30623 CVE-2026-42315 · GHSA-838g-gr43-qqg9

pyLoad: Path Traversal via Package Folder Name in set_package_data

HIGH 68

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00395 Published 2026-05-11 Fixed in 0.5.0b3.dev100 CWE-22

TI-2026-27594 CVE-2026-35464 · GHSA-4744-96p5-mp2j

Deserialization of untrusted data in pyload

HIGH 68

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00548 Published 2026-04-07 No fix listed CWE-502

TI-2026-25725 CVE-2026-33314 · GHSA-q485-cg9q-xq2r

pyload-ng: Improper Authentication and Origin Validation Error

HIGH 68

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0019 Published 2026-03-24 Fixed in 0.5.0b3.dev97 CWE-287

TI-2026-25278 CVE-2026-32808

pyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password Verification

HIGH 68

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0034 Published 2026-03-20 Fixed in 0.5.0b3.dev97 CWE-22

TI-2025-33983 CVE-2025-54140 · GHSA-xqpg-92fq-grfg

pyLoad has Path Traversal Vulnerability in json/upload Endpoint that allows Arbitrary File Write

HIGH 68

pyLoad is a free and open-source Download Manager written in pure Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00753 Published 2025-07-22 Fixed in 0.5.0b3.dev90 CWE-22

TI-2023-00483 CVE-2023-0509 · GHSA-8v53-23mx-hcf9

Improper Certificate Validation in pyload/pyload

HIGH 68

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00545 Published 2023-01-26 Fixed in 0.5.0b3.dev44 CWE-295

TI-2026-27341 CVE-2026-35187 · GHSA-2wvg-62qm-gj33

pyLoad has SSRF in parse_urls API endpoint via unvalidated URL parameter

HIGH 67

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00279 Published 2026-04-06 No fix listed CWE-918

TI-2024-14369 CVE-2024-21644 · GHSA-mqpq-2p68-46fv

pyLoad unauthenticated flask configuration leakage

HIGH 66

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.42443 Published 2024-01-08 Fixed in 0.5.0b3.dev77 CWE-284

Open these records in search →