Search for packages
| purl | pkg:pypi/pyload-ng@0.5.0b3.dev1 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.6 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-68w4-83fh-f2w8
|
pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password ## Summary `Api.getUserData` (legacy) and `Api.get_userdata` … | There are no reported fixed by versions. |