Code Injection in pyload-ng

CRÍTICO 9.8CVE-2023-0297 · GHSA-pf38-5p22-x6h6 · PYSEC-2026-498 · Published 14/01/2023 · updated 17/06/2026

Em resumo

CVE-2023-0297 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta pyload-ng, pyload (pyload).
Chance de exploração nos próximos 30 dias (EPSS): 95.9%, maior que 99.9% das vulnerabilidades.
Correção: atualize para 0.5.0b3.dev31 ou posterior.

Package	Affected versions	Patched versions
pyload-ng PyPI	`< 0.5.0b3.dev31`	`0.5.0b3.dev31`
pyload pyload	`≤ 0.4.20`	No fix yet

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

NVD description

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.5.0b3.dev31

0.5.0b3.dev31

≤ 0.4.20

No fix yet

Mais vulnerabilidades de pyload-ng

Ver tudo →