Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pyload-ng@0.5.0b3.dev102
purl pkg:pypi/pyload-ng@0.5.0b3.dev102
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-8w3f-4r8f-pf53
Aliases:
CVE-2025-53890
pyLoad vulnerable to XSS through insecure CAPTCHA #### Summary An unsafe JavaScript evaluation vulnerability in pyLoad’s CAPTCHA processing code allows … There are no reported fixed by versions.
GHSA-3f7w-p8vr-4v5f
Aliases:
CVE-2024-32880
pyLoad allows upload to arbitrary folder lead to RCE ### Summary An authenticated user can change the download folder and … There are no reported fixed by versions.
GHSA-4744-96p5-mp2j
Aliases:
CVE-2026-35464
pyLoad: Unprotected storage_folder enables arbitrary file write to Flask session store and code execution (Incomplete fix for CVE-2026-33509) ## Summary … There are no reported fixed by versions.
This package is not known to fix any advisories.