PYSEC-2026-38
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/deluge/PYSEC-2026-38.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-38
- Aliases
-
- CVE-2019-25585
- Published
- 2026-03-22T01:16:56.497Z
- Modified
- 2026-05-21T15:00:06.573332715Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash.
- References
Affected packages
PyPI / deluge
Package
- Name
- deluge
- View open source insights on deps.dev
- Purl
- pkg:pypi/deluge