PyPI - OSV

GHSA-68w4-83fh-f2w8

PyPI/pyload-ng

pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any... 3 hours ago

No fix available
Severity - 8.1 (High)

GHSA-9q47-3cm2-2rp8

PyPI/pyload-ng

pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled... 3 hours ago

No fix available
Severity - 6.9 (Medium)

GHSA-jq7h-wrvp-3rgx

PyPI/pyload-ng

pyLoad: Privilege revocation and password change through the REST API do not... 3 hours ago

No fix available
Severity - 7.5 (High)

GHSA-889w-m37p-88m5

PyPI/pyload-ng

pyLoad: Api.set_user_permission never invalidates the target's session 3 hours ago

No fix available
Severity - 7.5 (High)

GHSA-p3pr-8f3m-4qp8

PyPI/pyload-ng

pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via... 3 hours ago

No fix available
Severity - 6.4 (Medium)

GHSA-fr26-jjhm-638c

PyPI/pyload-ng

pyLoad: Tar extraction creates device nodes and FIFOs (member types not... 3 hours ago

No fix available
Severity - 7.7 (High)

GHSA-r44w-v6gf-x3p6

PyPI/pyload-ng

pyLoad has an authentication bypass in API key validation (check_apikey cache) 4 hours ago

Fix available
Severity - 8.1 (High)

GHSA-j92p-c242-7hfx

PyPI/pyload-ng

pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication... 4 hours ago

Fix available
Severity - 5.3 (Medium)

GHSA-vq8p-m3wm-gv5f

PyPI/pyload-ng

pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and... 4 hours ago

Fix available
Severity - 6.5 (Medium)

GHSA-m952-2w3f-6r8h

PyPI/strawberry-graphql

Strawberry legacy graphql-ws retains naturally completed subscription slots 6 hours ago

Fix available
Severity - 3.7 (Low)

GHSA-pfvf-fwfp-25mp

PyPI/strawberry-graphql

Strawberry GraphQL: Synchronous permission checks can treat an awaitable... 6 hours ago

Fix available
Severity - 7.5 (High)

MAL-2026-17712

PyPI/ig-gox

Malicious code in ig-gox (PyPI) 11 hours ago

No fix available

GHSA-556j-vv39-8rqv

PyPI/banks

Banks: Symlink traversal and arbitrary file disclosure/overwrite in... 22 hours ago

Fix available

GHSA-hmq2-7hp6-7crh

PyPI/banks

Banks: User-controlled prompt input can be parsed as privileged chat messages 22 hours ago

Fix available
Severity - 6.5 (Medium)

GHSA-2v95-h47v-g4x9

PyPI/indico

Indico: Incomplete Server-Side Request Forgery (SSRF) check 22 hours ago

Fix available
Severity - 6.8 (Medium)

GHSA-6p4f-j8j6-463q

PyPI/indico

Indico: Missing access check in legacy session export API 22 hours ago

Fix available
Severity - 4.3 (Medium)

Vulnerabilities