Code Injection in pyload-ng

CRITICO 9.8CVE-2023-0297 · GHSA-pf38-5p22-x6h6 · PYSEC-2026-498 · Published 14/01/2023 · updated 17/06/2026

In breve

CVE-2023-0297 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda pyload-ng, pyload (pyload).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 95.9%, superiore al 99.9% delle vulnerabilità.
Correzione: aggiornare a 0.5.0b3.dev31 o successiva.

Package	Affected versions	Patched versions
pyload-ng PyPI	`< 0.5.0b3.dev31`	`0.5.0b3.dev31`
pyload pyload	`≤ 0.4.20`	No fix yet

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

NVD description

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.5.0b3.dev31

0.5.0b3.dev31

≤ 0.4.20

No fix yet

Altre vulnerabilità di pyload-ng

Vedi tutto →