Read the docs

pyload

Records50All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high20CVSS 7.0–8.9

Exploited now

pyload records in CISA KEV

No pyload vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pyload 23 records CRITICAL

Records

23 records in Pyload · all components

TI-2023-00282 CVE-2023-0297 · GHSA-pf38-5p22-x6h6

Code Injection in pyload/pyload

Priority CRITICAL 93

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95915 Published 2023-01-14 Fixed in 0.5.0b3.dev31 CWE-94
TI-2023-00412 CVE-2023-0435 · GHSA-6jmx-pv77-wm5w

Excessive Attack Surface in pyload/pyload

Priority HIGH 82

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00747 Published 2023-01-22 Fixed in 0.5.0b3.dev41 CWE-1125
TI-2026-27594 CVE-2026-35464 · GHSA-4744-96p5-mp2j

Deserialization of untrusted data in pyload

Priority HIGH 68

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00548 Published 2026-04-07 No fix listed CWE-502
TI-2023-00483 CVE-2023-0509 · GHSA-8v53-23mx-hcf9

Improper Certificate Validation in pyload/pyload

Priority HIGH 68

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00545 Published 2023-01-26 Fixed in 0.5.0b3.dev44 CWE-295
TI-2024-14369 CVE-2024-21644 · GHSA-mqpq-2p68-46fv

pyLoad unauthenticated flask configuration leakage

Priority HIGH 66

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.42443 Published 2024-01-08 Fixed in 0.5.0b3.dev77 CWE-284
TI-2023-00411 CVE-2023-0434 · GHSA-x9vc-5q77-m7x4

Improper Input Validation in pyload/pyload

Priority HIGH 66

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00847 Published 2023-01-22 Fixed in 0.5.0b3.dev40 CWE-20
TI-2023-00217 CVE-2023-0227 · GHSA-rv9x-wmw4-44qj

Insufficient Session Expiration in pyload/pyload

Priority MEDIUM 64

Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00674 Published 2023-01-12 Fixed in 0.5.0b3.dev36 CWE-613
TI-2024-14370 CVE-2024-21645 · GHSA-ghmw-rwh8-6qmr

pyLoad Log Injection

Priority MEDIUM 63

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.24698 Published 2024-01-08 Fixed in 0.5.0b3.dev77 CWE-74
TI-2024-01154 CVE-2024-1240 · GHSA-3mmf-29wp-jc9p

Open Redirection in pyload/pyload

Priority MEDIUM 60

An open redirection vulnerability exists in pyload/pyload version 0.5.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2024-11-15 Fixed in pyload-ng 0.5.0b3.dev79 CWE-601
TI-2023-00462 CVE-2023-0488 · GHSA-wcm6-wv95-7jw6

Cross-site Scripting (XSS) - Stored in pyload/pyload

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00852 Published 2023-01-26 Fixed in 0.5.0b3.dev42 CWE-79
Open these records in search →