pyrofork vulnerabilities

CVEs whose affected-version data names the pyrofork package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-67720Medium· 6.5

10mo ago

Pyrofork is a modern, asynchronous MTProto API framework

Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the download_media method before using them in file path construction. When downl…

▾ Sunlitpyrofork · pyroforkEPSS 0.32%via NVD