PyPI/pyload-ng CVE-2026-35592: medium 6.5, EPSS 0.26%
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the _safe_extractall() function in src/pyload/plugins/extractors/UnTar.py uses os.path.commonprefix() for i
Action: Upgrade pyload-ng to 0.5.0b3.dev97 or later.
pip install pyload-ng==0.5.0b3.dev97Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0b3.dev97 | - |
Fixed versions
| 0.5.0b3.dev97 |
Sources
CVE-2026-35592 · published · modified · JSON