Approved changes feed: RSS · Atom

cpe:2.3:a:mangadex-downloader_project:mangadex-downloader:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMangadex Downloader Project (af9f79a3-d46d-563e-8cd9-ebd48c67bf63)
ProductMangadex Downloader (ba5d2fa7-ef2b-5819-9921-a2dc27679b23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mansuf/mangadex-downloader purl2cpe 2026-06-01 10:11:19.843991
pkg:pypi/mangadex-downloader purl2cpe 2026-06-01 10:11:19.843994

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36082 vulnerable 2026-06-08 05:46:06.299642 mangadex-downloader vulnerable to unauthorized file reading
MEDIUM (5.3)
mangadex-downloader is a command-line tool to download manga from MangaDex. When using `file:<location>` command and `<location>` is a web URL location (http, https), mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains a patch for this issue.
Published: 2022-09-07T21:35:09.000Z
Updated: 2025-04-23T17:13:31.228Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.