pyLoad 0.5.0 Beta 1
Approved changes feed: RSS · Atom
cpe:2.3:a:pyload:pyload:0.5.0:beta1:*:*:*:*:*:*
part: a version: 0.5.0 update: beta1
| Vendor | Pyload (13d569a8-bee6-54cc-aa16-925a7cdd1dac) |
|---|---|
| Product | Pyload (86814d7e-fd3c-5461-9fd5-8a68245895cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pyload/pyload |
purl2cpe | 2026-06-01 10:15:37.957281 |
pkg:gitlab/pyload/pyload |
purl2cpe | 2026-06-01 10:15:37.957282 |
pkg:pypi/pyload-ng |
purl2cpe | 2026-06-01 10:15:37.957283 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21645 |
vulnerable | 2026-06-08 06:27:36.280297 |
pyLoad Log Injection
MEDIUM (5.3)
pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in `pyload` allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by `pyload`. Forged or otherwise, corrupted log files can be used to cover an attacker’s tracks or even to implicate another party in the commission of a malicious act. This vulnerability has been patched in version 0.5.0b3.dev77.
Published: 2024-01-08T13:20:47.181Z
Updated: 2024-11-14T17:38:32.866Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21644 |
vulnerable | 2026-06-08 06:27:36.279068 |
pyLoad unauthenticated flask configuration leakage
HIGH (7.5)
pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the `SECRET_KEY` variable. This issue has been patched in version 0.5.0b3.dev77.
Published: 2024-01-08T13:20:55.182Z
Updated: 2025-06-17T20:39:15.676Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0434 |
vulnerable | 2026-06-08 05:52:04.946447 |
Improper Input Validation in pyload/pyload
MEDIUM (5.4)
Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40.
Published: 2023-01-22T00:00:00.000Z
Updated: 2025-04-02T15:51:41.649Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.