pyload-ng
The free and open-source Download Manager written in pure Python
Security Advisories for pyload-ng in pypi
Moderate
3 months ago
pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager
pypi
pyload-ng
Moderate
3 months ago
pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs
pypi
pyload-ng
High
5 months ago
pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal
pypi
pyload-ng
Moderate
5 months ago
pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad
pypi
pyload-ng
Moderate
5 months ago
PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI
pypi
pyload-ng
High
5 months ago
PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data
pypi
pyload-ng
Moderate
6 months ago
pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)
pypi
pyload-ng
High
6 months ago
pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)
pypi
pyload-ng
Moderate
6 months ago
pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions
pypi
pyload-ng
Moderate
6 months ago
pyload-ng: Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass
pypi
pyload-ng
Moderate
6 months ago
pyload-ng: Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng
pypi
pyload-ng
High
6 months ago
pyLoad: Improper Neutralization of Special Elements used in an OS Command
pypi
pyload-ng
Critical
6 months ago
pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)
pypi
pyload-ng
High
6 months ago
pyLoad: SSRF in parse_urls API endpoint via unvalidated URL parameter
pypi
pyload-ng
Critical
6 months ago
pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration
pypi
pyload-ng
High
7 months ago
pyLoad SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration
pypi
pyload-ng
Moderate
7 months ago
Improper Authentication and Origin Validation Error in pyload-ng
pypi
pyload-ng
High
7 months ago
pyLoad has an Arbitrary File Write via Path Traversal in edit_package()
pypi
pyload-ng
High
12 months ago
pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters
pypi
pyload-ng
High
about 1 year ago
Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs
pypi
pyload-ng
High
about 1 year ago
PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
pypi
pyload-ng
Critical
about 1 year ago
pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)
pypi
pyload-ng
Moderate
about 1 year ago
Pyload log Injection via API /json/add_package in add_name parameter
pypi
pyload-ng
High
about 1 year ago
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
pypi
pyload-ng
High
about 1 year ago
pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages
pypi
pyload-ng
High
almost 2 years ago
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
pypi
pyload-ng
Moderate
over 2 years ago
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
pypi
pyload-ng
Critical
over 2 years ago
Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation
pypi
pyload-ng
High
over 2 years ago
pyload Unauthenticated Flask Configuration Leakage vulnerability
pypi
pyload-ng
Moderate
almost 4 years ago
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
pypi
pyload-ng
Moderate
almost 4 years ago
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
pypi
pyload-ng