pyload vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 20247
3. 20257
4. 202627

Newest CVEs

• CVE-2026-75597

  pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo

  pyload · pyload

  Medium5.3
• CVE-2026-48484

  pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination

  pyload · pyload

  Medium6.5
• CVE-2026-48987

  pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager

  pyload · pyload

  Medium6.5
• CVE-2026-48737

  pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs

  pyload · pyload

  Medium4.9
• CVE-2026-45306

  pyLoad: Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory

  pyload · pyload

  Medium6.5
• CVE-2026-45348

  pyLoad: Stored XSS in Downloads view via unsanitized link URL in packages.js template literal

  pyload · pyload

  High8.7
• CVE-2026-46561

  pyLoad: SSRF via HTTP Redirect Bypass in parse_urls API

  pyload · pyload

  Medium5.0
• CVE-2026-44226

  pyLoad: Unauthenticated traceback disclosure via global exception handler in WebUI

  pyload · pyload

  Medium5.3
• CVE-2026-42315

  pyLoad: Path Traversal via Package Folder Name in set_package_data

  pyload · pyload

  High8.1
• CVE-2026-42314

  pyLoad: Path Traversal via Package Folder Name

  pyload · pyload

  Medium6.5