VulertSecurity VulertSecurity

Vulnerability Database · PyPI · pyload-ng · Version

pyload-ng 0.5.0b3.dev101

0.5.0b3.dev101 is affected by 44 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 10 High 21 Medium 11 Low 2 Unrated 0

All pyload-ng versions & vulnerabilities → Source repository Search the database for this package →
Released 09 Jul 2026 Status latest release Licence AGPL-3.0 Also known from other sources 16 Newer releases 106 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

pyload-ng 0.5.0b3.dev101 vulnerabilities

44 vulnerabilities cover pyload-ng 0.5.0b3.dev101. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2024-39205: pyload-ng Remote Code Execution Vulnerability Due to js2py Sandbox Escape 9.8 critical No fix published 29 Jun 2026
CVE-2025-53890: pyLoad XSS Vulnerability in CAPTCHA Processing 9.8 critical 0.20 29 Jun 2026
CVE-2025-53890: pyLoad Vulnerable to XSS through Insecure CAPTCHA Processing 9.8 critical 0.20 15 Jul 2025
pyload-ng Vulnerability: RCE with js2py Sandbox Escape 9.8 critical No fix published 09 Sep 2024
CVE-2026-35459: pyload-ng SSRF Filter Bypass via HTTP Redirect 9.3 critical No fix published 29 Jun 2026
CVE-2026-33992: pyLoad Server-Side Request Forgery Vulnerability Exposes Cloud Metadata 9.3 critical No fix published 29 Jun 2026
CVE-2026-35459: pyload-ng SSRF Filter Bypass via HTTP Redirect 9.3 critical No fix published 04 Apr 2026
CVE-2026-33992: pyLoad Server-Side Request Forgery Vulnerability Exposes Cloud Metadata 9.3 critical No fix published 27 Mar 2026
CVE-2024-32880: pyLoad Remote Code Execution via Arbitrary File Upload 9.1 critical No fix published 29 Jun 2026
CVE-2024-32880: pyload-ng allows upload to arbitrary folder lead to RCE 9.1 critical No fix published 24 Apr 2024
CVE-2026-41133: pyLoad Privilege Revocation Bypass Due to Stale Session Handling 8.8 high No fix published 13 Jul 2026
Stale Session Privilege Bypass in pyLoad: A Critical Authorization Flaw 8.8 high No fix published 14 Apr 2026
CVE-2026-35463: pyLoad Remote Code Execution via Improper Plugin Configuration 8.8 high No fix published 04 Apr 2026
CVE-2024-22416: pyload-ng - Cross-Site Request Forgery (CSRF) Vulnerability 8.8 high 1374c824271cb7e927740664d06d2e577624ca3e 18 Jan 2024
CVE-2026-45348: pyLoad Stored XSS Vulnerability in Downloads View 8.7 high No fix published 13 Jul 2026
CVE-2026-45348: pyLoad Stored XSS Vulnerability in Downloads View 8.7 high No fix published 14 May 2026
Brute Force Vulnerability in pyload-ng: Exposed User Data Access 8.1 high No fix published 09 Oct 2026
Critical Vulnerability in pyLoad: Device Node and FIFO Creation via Tar Extraction 7.7 high No fix published 09 Oct 2026
CVE-2026-35187: pyload-ng SSRF Vulnerability in parse_urls API Endpoint 7.7 high No fix published 13 Jul 2026
CVE-2026-35187: pyLoad SSRF Vulnerability in parse_urls API Endpoint 7.7 high No fix published 04 Apr 2026
Privilege Revocation and Session Invalidation Issue in pyLoad: A Security Concern 7.5 high No fix published 09 Oct 2026
Session Fixation Vulnerability in pyLoad: Inadequate Session Invalidation on Permission Changes 7.5 high No fix published 09 Oct 2026
CVE-2026-35464: pyLoad Arbitrary File Write and Code Execution Vulnerability 7.5 high No fix published 13 Jul 2026
CVE-2026-33509: pyLoad Remote Code Execution via Unrestricted Reconnect Script Configuration 7.5 high No fix published 13 Jul 2026
CVE-2025-7346: pyLoad Localhost Restriction Bypass Vulnerability 7.5 high No fix published 07 Jul 2026
CVE-2026-35464: pyLoad Arbitrary File Write and Code Execution Vulnerability 7.5 high No fix published 04 Apr 2026
CVE-2026-33509: pyLoad Remote Code Execution via Unrestricted Reconnect Script Configuration 7.5 high No fix published 20 Mar 2026
CVE-2025-7346: pyload-ng Vulnerability Allows Unauthenticated Package Creation 7.5 high No fix published 08 Jul 2025
CVE-2026-29778: pyLoad Arbitrary File Write via Path Traversal in edit_package() 7.1 high No fix published 05 Mar 2026
Rate-Limit Bypass and Audit-Log Spoofing in pyLoad: A Security Concern 6.9 medium No fix published 09 Oct 2026
CVE-2026-48987: pyLoad Unbounded Memory Growth Leading to DoS and Potential DDoS 6.5 medium No fix published 13 Jul 2026
CVE-2026-45306: pyLoad Incomplete Fix for Storage Folder Bypass Vulnerability 6.5 medium No fix published 13 Jul 2026
CVE-2026-48987: pyLoad Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager 6.5 medium No fix published 09 Jul 2026
CVE-2026-45306: pyLoad Incomplete Fix for Storage Folder Bypass Vulnerability 6.5 medium No fix published 14 May 2026
SSRF Vulnerability in pyLoad WindowsPhoneNotify Addon: Unrestricted HTTP Connections 6.4 medium No fix published 09 Oct 2026
CVE-2026-40071: pyload-ng WebUI JSON Permission Mismatch Allows Unauthorized Modify Actions 5.4 medium No fix published 13 Jul 2026
Permission Bypass Vulnerability in pyload-ng: Unauthorized Access to Modify Actions 5.4 medium No fix published 08 Apr 2026
CVE-2026-48737: pyLoad SSRF Guard Bypass via IPv6 Transition Wrappers 4.9 medium No fix published 13 Jul 2026
CVE-2026-48737: pyLoad SSRF Guard Bypass via IPv6 Transition Wrappers 4.9 medium No fix published 09 Jul 2026
Log Injection Vulnerability in Pyload-ng: Arbitrary Log Entry Injection via API 4.3 medium No fix published 30 Jul 2025
Session Management Flaw in pyLoad: Inadequate Invalidations After Permission Changes 2.9 low No fix published 14 Apr 2026
CVE-2024-47821: pyload-ng Remote Code Execution Vulnerability Due to Insecure Script Handling 2.3 low No fix published 25 Oct 2024
Unauthorized Access Vulnerability in pyload-ng: Bypass of Localhost Restrictions N/A high No fix published 08 Jul 2025
Remote Code Execution Vulnerability in pyload-ng: Duplicate Advisory GHSA-25pw-q952-x37g N/A high No fix published 28 Oct 2024

Looking for another version, or everything Vulert holds for pyload-ng?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About pyload-ng 0.5.0b3.dev101

Is pyload-ng 0.5.0b3.dev101 vulnerable?

Yes. 44 vulnerabilities in the Vulert database cover pyload-ng 0.5.0b3.dev101: 10 critical, 21 high, 11 medium and 2 low. Each entry above names the fixed version to move to.

Is 0.5.0b3.dev101 the latest release of pyload-ng?

Yes. 0.5.0b3.dev101 is the current release, published 09 Jul 2026. Staying on the current line is what keeps you inside the publisher's fixes.

How do I monitor pyload-ng for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the pyload-ng version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.