PyPI/cyberdrop-dl-patched CVE-2026-54254: medium, EPSS 0.53%
Pixeldrain API key shared with unverified thirdparty sites
Action: Upgrade cyberdrop-dl-patched to 9.14.0 or later.
pip install cyberdrop-dl-patched==9.14.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.5.0 | 9.14.0 | - |
Fixed versions
| 9.14.0 |
Sources
- osv: GHSA-f5pf-q7c7-m3vv
- https://github.com/Cyberdrop-DL/cyberdrop-dl/security/advisories/GHSA-f5pf-q7c7-m3vv
- https://github.com/Cyberdrop-DL/cyberdrop-dl/commit/4479555ae3f9d56d7657d6179a5bac3123eb4e2b
- https://docs.pixeldrain.com/questions_and_answers/#alternative-domain-names
- https://github.com/Cyberdrop-DL/cyberdrop-dl
- https://github.com/Cyberdrop-DL/cyberdrop-dl/releases/tag/9.14.0
CVE-2026-54254 · published · modified · JSON