pyload-ng
PyPI53 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting pyload-ngpage 2 of 2
- CVE-2026-48737MEDIUMCVSS 4.9EG 4.92026-07-09
vulnerable: 0.5.0a5.dev528 ... 0.5.0b3.dev99 (105 versions)
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, is_global_address in src/pyload/core/utils/web/check.py relies on Python's global-address classification without examining IPv4 destinations embe…
- CVE-2026-48987MEDIUMCVSS 6.5EG 6.52026-07-09
vulnerable: 0.5.0a5.dev528 ... 0.5.0b3.dev99 (105 versions)
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload/core/managers/event_manager.py appends a Client object to the clients list for each unique uuid submitted to the authe…
- CVE-2026-75597MEDIUMCVSS 5.3EG 5.3fixed in 0.5.0b3.dev1012026-10-09
vulnerable: 0.5.0a5.dev528 ... 0.5.0b3.dev99 (105 versions)
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/<path:filename>` route in `src/pyload/webui/app/blueprints/app_blueprint.py` renders Jinja2 templates without any authentication requir…
Check whether pyload-ng is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for pyload-ng CVEs against the assets you own.
Book a Demo →