PYSEC-2026-908
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/pyload-ng/PYSEC-2026-908.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-908
- Aliases
- Published
- 2026-07-07T10:17:27Z
- Modified
- 2026-07-07T11:45:49Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H CVSS Calculator
- Summary
- Improper Input Validation in pyload-ng
- Details
-
Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2023-0434
- https://github.com/pyload/pyload/commit/a2b1eb1028f45ac58dea5f58593c1d3db2b4a104
- https://github.com/pyload/pyload
- https://huntr.dev/bounties/7d9332d8-6997-483b-9fb9-bcf2ae01dad4
- https://pypi.org/project/pyload-ng
- https://github.com/advisories/GHSA-x9vc-5q77-m7x4
Affected packages
PyPI / pyload-ng
Package
- Name
- pyload-ng
- View open source insights on deps.dev
- Purl
- pkg:pypi/pyload-ng
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed0.5.0b3.dev40
Affected versions
0.*
0.5.0a5.dev528
0.5.0a5.dev532
0.5.0a5.dev535
0.5.0a5.dev536
0.5.0a5.dev537
0.5.0a5.dev539
0.5.0a5.dev540
0.5.0a5.dev545
0.5.0a5.dev562
0.5.0a5.dev564
0.5.0a5.dev565
0.5.0a6.dev570
0.5.0a6.dev578
0.5.0a6.dev587
0.5.0a7.dev596
0.5.0a8.dev602
0.5.0a9.dev615
0.5.0a9.dev629
0.5.0a9.dev632
0.5.0a9.dev641
0.5.0a9.dev643
0.5.0a9.dev655
0.5.0a9.dev806
0.5.0b1.dev1
0.5.0b1.dev2
0.5.0b1.dev3
0.5.0b1.dev4
0.5.0b1.dev5
0.5.0b2.dev9
0.5.0b2.dev10
0.5.0b2.dev11
0.5.0b2.dev12
0.5.0b3.dev13
0.5.0b3.dev14
0.5.0b3.dev17
0.5.0b3.dev18
0.5.0b3.dev19
0.5.0b3.dev20
0.5.0b3.dev21
0.5.0b3.dev22
0.5.0b3.dev24
0.5.0b3.dev26
0.5.0b3.dev27
0.5.0b3.dev28
0.5.0b3.dev29
0.5.0b3.dev30
0.5.0b3.dev31
0.5.0b3.dev32
0.5.0b3.dev33
0.5.0b3.dev34
0.5.0b3.dev35
0.5.0b3.dev38
0.5.0b3.dev39