pyload-ng project
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 5, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →pyLoad: Path Traversal via Package Folder Name in set_package_data
pyLoad: Path Traversal via Package Folder Name
pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy
pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification
pyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)
pyLoad has an Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass
Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng
pyLoad has Improper Neutralization of Special Elements used in an OS Command
pyLoad has SSRF fix bypass via HTTP redirect
pyLoad has SSRF in parse_urls API endpoint via unvalidated URL parameter
Monitor pyload-ng project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.