Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

23 records

Vendor: pyload Component: Pyload Clear all filters
TI-2026-27594 CVE-2026-35464 · GHSA-4744-96p5-mp2j

Deserialization of untrusted data in pyload

Priority HIGH 68

pyLoad is a free and open-source download manager written in Python.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00548 Published 2026-04-07 No fix listed CWE-502
TI-2024-01154 CVE-2024-1240 · GHSA-3mmf-29wp-jc9p

Open Redirection in pyload/pyload

Priority MEDIUM 60

An open redirection vulnerability exists in pyload/pyload version 0.5.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2024-11-15 Fixed in pyload-ng 0.5.0b3.dev79 CWE-601
TI-2024-14369 CVE-2024-21644 · GHSA-mqpq-2p68-46fv

pyLoad unauthenticated flask configuration leakage

Priority HIGH 66

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.42443 Published 2024-01-08 Fixed in 0.5.0b3.dev77 CWE-284
TI-2024-14370 CVE-2024-21645 · GHSA-ghmw-rwh8-6qmr

pyLoad Log Injection

Priority MEDIUM 63

pyLoad is the free and open-source Download Manager written in pure Python.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.24698 Published 2024-01-08 Fixed in 0.5.0b3.dev77 CWE-74
TI-2023-00483 CVE-2023-0509 · GHSA-8v53-23mx-hcf9

Improper Certificate Validation in pyload/pyload

Priority HIGH 68

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00545 Published 2023-01-26 Fixed in 0.5.0b3.dev44 CWE-295
TI-2023-00462 CVE-2023-0488 · GHSA-wcm6-wv95-7jw6

Cross-site Scripting (XSS) - Stored in pyload/pyload

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00852 Published 2023-01-26 Fixed in 0.5.0b3.dev42 CWE-79
TI-2023-00412 CVE-2023-0435 · GHSA-6jmx-pv77-wm5w

Excessive Attack Surface in pyload/pyload

Priority HIGH 82

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00747 Published 2023-01-22 Fixed in 0.5.0b3.dev41 CWE-1125
TI-2023-00411 CVE-2023-0434 · GHSA-x9vc-5q77-m7x4

Improper Input Validation in pyload/pyload

Priority HIGH 66

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00847 Published 2023-01-22 Fixed in 0.5.0b3.dev40 CWE-20
TI-2023-00282 CVE-2023-0297 · GHSA-pf38-5p22-x6h6

Code Injection in pyload/pyload

Priority CRITICAL 93

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95915 Published 2023-01-14 Fixed in 0.5.0b3.dev31 CWE-94
TI-2023-00217 CVE-2023-0227 · GHSA-rv9x-wmw4-44qj

Insufficient Session Expiration in pyload/pyload

Priority MEDIUM 64

Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00674 Published 2023-01-12 Fixed in 0.5.0b3.dev36 CWE-613