PyPI/pyload-ng: medium 6.4
pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.0b3.dev101 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-p3pr-8f3m-4qp8
- https://github.com/pyload/pyload/security/advisories/GHSA-p3pr-8f3m-4qp8
- https://github.com/pyload/pyload
- https://github.com/pyload/pyload/commit/989a551d2ae0c00b0d2c7baf6d850180c9b46559
published · modified · JSON