CVE-2026-35459
2 advisories.
PyPI/pyload-ng CVE-2026-35459: critical
pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.0b3.dev96 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7gvf-3w72-p2pg
- https://github.com/pyload/pyload/security/advisories/GHSA-7gvf-3w72-p2pg
- https://nvd.nist.gov/vuln/detail/CVE-2026-33992
- https://nvd.nist.gov/vuln/detail/CVE-2026-35459
- https://github.com/pyload/pyload/commit/33c55da084320430edfd941b60e3da0eb1be9443
- https://github.com/pyload/pyload
CVE-2026-35459 · published · modified · JSON
PyPI/pyload-ng CVE-2026-35459: unknown
pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.0b3.dev96 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-495
- https://github.com/pyload/pyload/security/advisories/GHSA-7gvf-3w72-p2pg
- https://nvd.nist.gov/vuln/detail/CVE-2026-33992
- https://nvd.nist.gov/vuln/detail/CVE-2026-35459
- https://github.com/pyload/pyload/commit/33c55da084320430edfd941b60e3da0eb1be9443
- https://github.com/pyload/pyload
- https://pypi.org/project/pyload-ng
- https://github.com/advisories/GHSA-7gvf-3w72-p2pg
CVE-2026-35459 · published · modified · JSON