PyPI/pyload-ng CVE-2024-47821: critical 9.1, EPSS 0.68%
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Action: Upgrade pyload-ng to 0.5.0b3.dev87 or later.
pip install pyload-ng==0.5.0b3.dev87Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0b3.dev87 | - |
Fixed versions
| 0.5.0b3.dev87 |
Sources
- osv: GHSA-w7hq-f2pj-c53g
- https://github.com/pyload/pyload/security/advisories/GHSA-w7hq-f2pj-c53g
- https://nvd.nist.gov/vuln/detail/CVE-2024-47821
- https://github.com/pyload/pyload/commit/48f59567393a19263c8a0285256a7537dc9ce109
- https://github.com/pyload/pyload
- https://github.com/pypa/advisory-database/tree/main/vulns/pyload-ng/PYSEC-2024-302.yaml
CVE-2024-47821 · published · modified · JSON