PyPI/pyload-ng CVE-2024-21644: high 7.5, EPSS 42.44%

pyload Unauthenticated Flask Configuration Leakage vulnerability

Action: Upgrade pyload-ng to 0.5.0b3.dev77 or later.

pip install pyload-ng==0.5.0b3.dev77

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1820
• https://github.com/pyload/pyload/security/advisories/GHSA-mqpq-2p68-46fv
• https://nvd.nist.gov/vuln/detail/CVE-2024-21644
• https://github.com/pyload/pyload/commit/bb22063a875ffeca357aaf6e2edcd09705688c40
• https://github.com/pyload/pyload
• https://pypi.org/project/pyload-ng
• https://github.com/advisories/GHSA-mqpq-2p68-46fv

CVE-2024-21644 · published 2026-07-07T11:45:29.730451Z · modified 2026-07-07T17:47:43.469495329Z · JSON