pyload-ng (PyPI)
Advisories
108
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.20 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "pyload-ng>=0.20"poetry
poetry add "pyload-ng>=0.20"uv
uv add "pyload-ng>=0.20"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-68w4-83fh-f2w8 pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password |
High | >= 0.5.0b3.dev1, <= 0.5.0b3.dev101 | No fix yet |
| GHSA-9q47-3cm2-2rp8 pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header |
Medium | No fix yet | |
| GHSA-jq7h-wrvp-3rgx pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session |
High | <= 0.5.0b3.dev101 | No fix yet |
| GHSA-889w-m37p-88m5 pyLoad: Api.set_user_permission never invalidates the target's session |
High | >= 0.5.0b3.dev98, <= 0.5.0b3.dev101 | No fix yet |
| GHSA-p3pr-8f3m-4qp8 pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host |
Medium | <= 0.5.0b3.dev101 | No fix yet |
| GHSA-fr26-jjhm-638c pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=) |
High | <= 0.5.0b3.dev101 | No fix yet |
| GHSA-r44w-v6gf-x3p6 pyLoad has an authentication bypass in API key validation (check_apikey cache) |
High | < 0.5.0b3.dev101 | 0.5.0b3.dev101 |
| GHSA-j92p-c242-7hfx pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo |
Medium EPSS 0.30% |
< 0.5.0b3.dev101 | 0.5.0b3.dev101 |
| GHSA-j92p-c242-7hfx pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo |
Medium EPSS 0.30% |
< 0.5.0b3.dev101 | 0.5.0b3.dev101 |
| GHSA-vq8p-m3wm-gv5f pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination |
Medium EPSS 0.37% |
< 0.5.0b3.dev101 | 0.5.0b3.dev101 |
| GHSA-vq8p-m3wm-gv5f pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination |
Medium EPSS 0.37% |
< 0.5.0b3.dev101 | 0.5.0b3.dev101 |
| GHSA-c2f9-4mc8-j656 pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager |
Medium EPSS 0.44% |
<= 0.5.0b3.dev100 | No fix yet |
| GHSA-c2f9-4mc8-j656 pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager |
Medium EPSS 0.44% |
<= 0.5.0b3.dev100 | No fix yet |
| GHSA-m5x5-28jr-gpjj pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs |
Medium EPSS 0.29% |
<= 0.5.0b3.dev100 | No fix yet |
| GHSA-m5x5-28jr-gpjj pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs |
Medium EPSS 0.29% |
<= 0.5.0b3.dev100 | No fix yet |
| GHSA-8rp3-xc6w-5qp5 pyload-ng: SSRF via HTTP Redirect Bypass in parse_urls API |
Medium EPSS 0.18% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-8rp3-xc6w-5qp5 pyload-ng: SSRF via HTTP Redirect Bypass in parse_urls API |
Medium EPSS 0.18% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-fcjq-435v-jx94 pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal |
High EPSS 0.20% |
<= 0.5.0b3.dev99 | No fix yet |
| GHSA-fcjq-435v-jx94 pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal |
High EPSS 0.20% |
<= 0.5.0b3.dev99 | No fix yet |
| GHSA-w727-595x-pc3r pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad |
Medium EPSS 0.23% |
<= 0.5.0b3.dev99 | No fix yet |
| GHSA-w727-595x-pc3r pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad |
Medium EPSS 0.23% |
<= 0.5.0b3.dev99 | No fix yet |
| GHSA-c3gc-9pf2-84gg PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI |
Medium EPSS 0.34% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-c3gc-9pf2-84gg PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI |
Medium EPSS 0.34% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-838g-gr43-qqg9 PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data |
Medium EPSS 0.40% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-838g-gr43-qqg9 PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data |
Medium EPSS 0.40% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-97r3-5w84-r4q8 PyLoad Vulnerable to Path Traversal via Package Folder Name |
Medium EPSS 0.34% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-97r3-5w84-r4q8 PyLoad Vulnerable to Path Traversal via Package Folder Name |
Medium EPSS 0.34% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-pg67-9wjv-mr85 pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586) |
High EPSS 0.40% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-pg67-9wjv-mr85 pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586) |
High EPSS 0.40% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-ccxc-x975-4hh9 pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586) |
Medium EPSS 0.17% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-ccxc-x975-4hh9 pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586) |
Medium EPSS 0.17% |
< 0.5.0b3.dev100 | 0.5.0b3.dev100 |
| GHSA-mp82-fmj6-f22v pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition) |
Medium EPSS 0.17% |
< 0.5.0b3.dev98 | 0.5.0b3.dev98 |
| GHSA-mp82-fmj6-f22v pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition) |
Medium EPSS 0.17% |
< 0.5.0b3.dev69 | 0.5.0b3.dev69 |
| GHSA-fj52-5g4h-gmq8 pyLoad's Session Not Invalidated After Permission Changes |
Low | <= 0.5.0b3.dev97 | No fix yet |
| GHSA-66hx-chf7-3332 pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass) |
High EPSS 0.33% |
<= 0.5.0b3.dev97 | No fix yet |
| GHSA-66hx-chf7-3332 pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass) |
High EPSS 0.33% |
<= 0.5.0b3.dev97 | No fix yet |
| GHSA-rfgh-63mg-8pwm pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions |
Medium EPSS 0.22% |
<= 0.5.0b3 | No fix yet |
| GHSA-rfgh-63mg-8pwm pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions |
Medium EPSS 0.22% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-mvwx-582f-56r7 pyload-ng: Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass |
Medium EPSS 0.26% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-mvwx-582f-56r7 pyload-ng: Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass |
Medium EPSS 0.26% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-ppvx-rwh9-7rj7 pyload-ng: Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng |
Medium EPSS 0.14% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-ppvx-rwh9-7rj7 pyload-ng: Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng |
Medium EPSS 0.14% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-4744-96p5-mp2j pyLoad: Unprotected storage_folder enables arbitrary file write to Flask session store and code execution (Incomplete fix for CVE-2026-33509) |
High EPSS 0.53% |
<= 0.5.0b3 | No fix yet |
| GHSA-4744-96p5-mp2j pyLoad: Unprotected storage_folder enables arbitrary file write to Flask session store and code execution (Incomplete fix for CVE-2026-33509) |
High EPSS 0.53% |
<= 0.5.0b3 | No fix yet |
| GHSA-w48f-wwwf-f5fr pyLoad: Improper Neutralization of Special Elements used in an OS Command |
High EPSS 0.81% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-w48f-wwwf-f5fr pyLoad: Improper Neutralization of Special Elements used in an OS Command |
High EPSS 0.81% |
<= 0.5.0b3.dev96 | No fix yet |
| GHSA-7gvf-3w72-p2pg pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992) |
Critical EPSS 0.28% |
<= 0.5.0b3.dev96 | No fix yet |
| GHSA-7gvf-3w72-p2pg pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992) |
Critical EPSS 0.28% |
<= 0.5.0b3.dev96 | No fix yet |
| GHSA-2wvg-62qm-gj33 pyLoad: SSRF in parse_urls API endpoint via unvalidated URL parameter |
High EPSS 0.27% |
<= 0.5.0b3.dev96 | No fix yet |
| GHSA-2wvg-62qm-gj33 pyLoad: SSRF in parse_urls API endpoint via unvalidated URL parameter |
High EPSS 0.27% |
<= 0.5.0b3.dev96 | No fix yet |
| GHSA-m74m-f7cr-432x pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration |
Medium EPSS 0.40% |
<= 0.5.0b3.dev96 | No fix yet |
| GHSA-m74m-f7cr-432x pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration |
Medium EPSS 0.40% |
<= 0.5.0b3.dev96 | No fix yet |
| GHSA-r7mc-x6x7-cqxx pyLoad SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration |
High EPSS 0.55% |
>= 0.4.0, <= 0.5.0b3.dev96 | No fix yet |
| GHSA-r7mc-x6x7-cqxx pyLoad SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration |
High EPSS 0.55% |
>= 0.4.0, <= 0.5.0b3.dev96 | No fix yet |
| GHSA-q485-cg9q-xq2r Improper Authentication and Origin Validation Error in pyload-ng |
Medium EPSS 0.19% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-q485-cg9q-xq2r Improper Authentication and Origin Validation Error in pyload-ng |
Medium EPSS 0.19% |
< 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-6px9-j4qr-xfjw pyLoad has an Arbitrary File Write via Path Traversal in edit_package() |
Medium EPSS 0.54% |
>= 0.5.0b3.dev13, < 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-6px9-j4qr-xfjw pyLoad has an Arbitrary File Write via Path Traversal in edit_package() |
Medium EPSS 0.54% |
>= 0.5.0b3.dev13, < 0.5.0b3.dev97 | 0.5.0b3.dev97 |
| GHSA-cjjf-27cc-pvmv pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters |
High EPSS 0.52% |
< 0.5.0b3.dev91 | 0.5.0b3.dev91 |
| GHSA-cjjf-27cc-pvmv pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters |
High EPSS 0.52% |
< 0.5.0b3.dev91 | 0.5.0b3.dev91 |
| GHSA-9gjj-6gj7-c4wj Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs |
High EPSS 0.33% |
< 0.5.0b3.dev92 | 0.5.0b3.dev92 |
| GHSA-9gjj-6gj7-c4wj Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs |
High EPSS 0.33% |
< 0.5.0b3.dev92 | 0.5.0b3.dev92 |
| GHSA-pwh4-6r3m-j2rf PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter |
High EPSS 0.34% |
< 0.5.0b3.dev91 | 0.5.0b3.dev91 |
| GHSA-pwh4-6r3m-j2rf PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter |
High EPSS 0.34% |
< 0.5.0b3.dev91 | 0.5.0b3.dev91 |
| GHSA-48rp-jc79-2264 pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE) |
Critical EPSS 1.29% |
< 0.5.0b3.dev90 | 0.5.0b3.dev90 |
| GHSA-48rp-jc79-2264 pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE) |
Critical EPSS 1.29% |
< 0.5.0b3.dev90 | 0.5.0b3.dev90 |
| GHSA-3wwm-hjv7-23r3 Pyload log Injection via API /json/add_package in add_name parameter |
Medium | <= 0.5.0b3.dev89 | No fix yet |
| GHSA-xqpg-92fq-grfg `pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write |
High EPSS 0.75% |
>= 0.5.0b3.dev89, < 0.5.0b3.dev90 | 0.5.0b3.dev90 |
| GHSA-xqpg-92fq-grfg `pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write |
High EPSS 0.75% |
>= 0.5.0b3.dev89, < 0.5.0b3.dev90 | 0.5.0b3.dev90 |
| GHSA-8w3f-4r8f-pf53 pyLoad vulnerable to XSS through insecure CAPTCHA |
Critical EPSS 1.30% |
< 0.20 | 0.20 |
| GHSA-8w3f-4r8f-pf53 pyLoad vulnerable to XSS through insecure CAPTCHA |
Critical EPSS 1.30% |
< 0.20 | 0.20 |
| GHSA-2wcm-vx67-3x4q Duplicate Advisory: GHSA-x698-5hjm-w2m5 Withdrawn |
High | <= 0.5.0b3.dev77 | No fix yet |
| GHSA-x698-5hjm-w2m5 pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages |
High EPSS 0.38% |
<= 0.5.0b3.dev88 | No fix yet |
| GHSA-x698-5hjm-w2m5 pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages |
High EPSS 0.38% |
<= 0.5.0b3.dev88 | No fix yet |
| PYSEC-2024-123 An open redirection vulnerability exists in pyload/pyload version 0.5.0. |
Medium EPSS 0.34% |
all versions | No fix yet |
| GHSA-25pw-q952-x37g Duplicate Advisory: pyload-ng vulnerable to RCE with js2py sandbox escape Withdrawn |
High | <= 0.5.0b3.dev85 | No fix yet |
| GHSA-w7hq-f2pj-c53g pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API |
Low EPSS 0.68% |
<= 0.5.0 | No fix yet |
| GHSA-w7hq-f2pj-c53g pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API |
Low EPSS 0.68% |
< 0.5.0b3.dev87 | 0.5.0b3.dev87 |
| GHSA-r9pp-r4xf-597r pyload-ng vulnerable to RCE with js2py sandbox escape |
Critical EPSS 16.54% |
<= 0.5.0b3.dev85 | No fix yet |
| GHSA-r9pp-r4xf-597r pyload-ng vulnerable to RCE with js2py sandbox escape |
Critical EPSS 16.54% |
<= 0.5.0b3.dev85 | No fix yet |
| GHSA-3f7w-p8vr-4v5f pyLoad allows upload to arbitrary folder lead to RCE |
High EPSS 1.35% |
<= 0.5.0 | No fix yet |
| GHSA-3f7w-p8vr-4v5f pyLoad allows upload to arbitrary folder lead to RCE |
High EPSS 1.35% |
<= 0.5.0 | No fix yet |
| GHSA-g3cm-qg2v-2hj5 pyLoad open redirect vulnerability due to improper validation of the is_safe_url function |
Medium EPSS 0.55% |
< 0.5.0b3.dev79 | 0.5.0b3.dev79 |
| GHSA-g3cm-qg2v-2hj5 pyLoad open redirect vulnerability due to improper validation of the is_safe_url function |
Medium EPSS 0.55% |
< 0.5.0b3.dev79 | 0.5.0b3.dev79 |
| GHSA-pgpj-v85q-h5fm Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation |
High EPSS 0.95% |
< 0.5.0b3.dev78 | 0.5.0b3.dev78 |
| GHSA-pgpj-v85q-h5fm Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation |
High EPSS 0.95% |
< 0.5.0b3.dev78 | 0.5.0b3.dev78 |
| GHSA-ghmw-rwh8-6qmr pyload Log Injection vulnerability |
Medium EPSS 24.70% |
< 0.5.0b3.dev77 | 0.5.0b3.dev77 |
| GHSA-ghmw-rwh8-6qmr pyload Log Injection vulnerability |
Medium EPSS 24.70% |
< 0.5.0b3.dev77 | 0.5.0b3.dev77 |
| GHSA-mqpq-2p68-46fv pyload Unauthenticated Flask Configuration Leakage vulnerability |
High EPSS 42.44% |
< 0.5.0b3.dev77 | 0.5.0b3.dev77 |
| GHSA-mqpq-2p68-46fv pyload Unauthenticated Flask Configuration Leakage vulnerability |
High EPSS 42.44% |
< 0.5.0b3.dev77 | 0.5.0b3.dev77 |
| GHSA-h73m-pcfw-25h2 Download to arbitrary folder can lead to RCE |
High EPSS 1.06% |
< 0.5.0b3.dev75 | 0.5.0b3.dev75 |
| GHSA-h73m-pcfw-25h2 Download to arbitrary folder can lead to RCE |
High EPSS 1.06% |
< 0.5.0b3.dev75 | 0.5.0b3.dev75 |
| GHSA-wcm6-wv95-7jw6 Cross-site Scripting in pyload-ng |
Medium EPSS 0.83% |
< 0.5.0b3.dev42 | 0.5.0b3.dev42 |
| GHSA-8v53-23mx-hcf9 Improper Certificate Validation in pyload-ng |
High EPSS 0.53% |
< 0.5.0b3.dev44 | 0.5.0b3.dev44 |
| GHSA-wcm6-wv95-7jw6 Cross-site Scripting in pyload-ng |
Medium EPSS 0.83% |
< 0.5.0b3.dev42 | 0.5.0b3.dev42 |
| GHSA-8v53-23mx-hcf9 Improper Certificate Validation in pyload-ng |
High EPSS 0.53% |
< 0.5.0b3.dev44 | 0.5.0b3.dev44 |
| GHSA-6jmx-pv77-wm5w Excessive Attack Surface in pyload-ng |
Critical EPSS 0.73% |
< 0.5.0b3.dev41 | 0.5.0b3.dev41 |
| GHSA-6jmx-pv77-wm5w Excessive Attack Surface in pyload-ng |
Critical EPSS 0.73% |
< 0.5.0b3.dev41 | 0.5.0b3.dev41 |
| GHSA-x9vc-5q77-m7x4 Improper Input Validation in pyload-ng |
Medium EPSS 0.82% |
< 0.5.0b3.dev40 | 0.5.0b3.dev40 |
| GHSA-x9vc-5q77-m7x4 Improper Input Validation in pyload-ng |
Medium EPSS 0.82% |
< 0.5.0b3.dev40 | 0.5.0b3.dev40 |
| GHSA-pf38-5p22-x6h6 Code Injection in pyload-ng |
Critical EPSS 95.91% |
< 0.5.0b3.dev31 | 0.5.0b3.dev31 |
| GHSA-pf38-5p22-x6h6 Code Injection in pyload-ng |
Critical EPSS 95.91% |
< 0.5.0b3.dev31 | 0.5.0b3.dev31 |
| GHSA-rv9x-wmw4-44qj Pyload Insufficient Session Expiration vulnerability |
Medium EPSS 0.67% |
< 0.5.0b3.dev36 | 0.5.0b3.dev36 |
| GHSA-rv9x-wmw4-44qj Pyload Insufficient Session Expiration vulnerability |
Medium EPSS 0.67% |
< 0.5.0b3.dev36 | 0.5.0b3.dev36 |
| GHSA-h8r9-467r-vjjf pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames |
Medium EPSS 0.48% |
< 0.5.0b3.dev33 | 0.5.0b3.dev33 |
| GHSA-h8r9-467r-vjjf pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames |
Medium EPSS 0.48% |
< 0.5.0b3.dev33 | 0.5.0b3.dev33 |
| GHSA-m3g7-wrrq-v5c8 Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute |
Medium EPSS 0.45% |
< 0.5.0b3.dev32 | 0.5.0b3.dev32 |
| GHSA-m3g7-wrrq-v5c8 Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute |
Medium EPSS 0.45% |
< 0.5.0b3.dev32 | 0.5.0b3.dev32 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor