pyload vulnerabilities
53 published CVEs name pyload among the affected products.
- 53Published CVEs53 of them scored
- 31Last 12 monthspublished in the last year
- 10Critical21 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-123816
pyLoad: Authentication bypass in API key validation (check_apikey cache)
pyload · pyload
High8.1 - CVE-2026-123815
pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)
pyload · pyload
Critical9.4 - CVE-2026-123814
pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host
pyload · pyload
Medium6.4 - CVE-2026-123813
pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
pyload · pyload
High7.5 - CVE-2026-75597
pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo
pyload · pyload
Medium5.3 - CVE-2026-48484
pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination
pyload · pyload
Medium6.5 - CVE-2026-48987
pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager
pyload · pyload
Medium6.5 - CVE-2026-48737
pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs
pyload · pyload
Medium4.9 - CVE-2026-45306
pyLoad: Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory
pyload · pyload
Medium6.5 - CVE-2026-45348
pyLoad: Stored XSS in Downloads view via unsanitized link URL in packages.js template literal
pyload · pyload
High8.7