pyload-ng vulnerabilities
CVEs whose affected-version data names the pyload-ng package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
38 CVEsRSS
CVE-2024-21645Medium· 5.3PoCpyload Log Injection vulnerability
pyload Log Injection vulnerability
▾ Twilightpyload-ng · pyload-ngEPSS 25%via OSV
CVE-2023-47890High· 7.6Download to arbitrary folder can lead to RCE
Download to arbitrary folder can lead to RCE
▾ Twilightpyload-ng · pyload-ngEPSS 1.1%via OSV
CVE-2023-0488Medium· 5.4Cross-site Scripting in pyload-ng
Cross-site Scripting in pyload-ng
▾ Sunlitpyload-ng · pyload-ngEPSS 0.83%via OSV
CVE-2023-0509High· 7.4Improper Certificate Validation in pyload-ng
Improper Certificate Validation in pyload-ng
▾ Twilightpyload-ng · pyload-ngEPSS 0.53%via OSV
CVE-2023-0434Medium· 5.4Improper Input Validation in pyload-ng
Improper Input Validation in pyload-ng
▾ Sunlitpyload-ng · pyload-ngEPSS 0.82%via OSV
CVE-2023-0227Medium· 6.5Pyload Insufficient Session Expiration vulnerability
Pyload Insufficient Session Expiration vulnerability
▾ Sunlitpyload-ng · pyload-ngEPSS 0.67%via OSV
CVE-2023-0055Medium· 5.3Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
▾ Sunlitpyload-ng · pyload-ngEPSS 0.45%via OSV
CVE-2023-0057Medium· 6.1pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
▾ Sunlitpyload-ng · pyload-ngEPSS 0.48%via OSV