CVE-2026-75597
2 advisories.
PyPI/pyload-ng CVE-2026-75597: medium 5.3, EPSS 0.30%
pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo
Action: Upgrade pyload-ng to 0.5.0b3.dev101 or later.
pip install pyload-ng==0.5.0b3.dev101Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0b3.dev101 | - |
Fixed versions
| 0.5.0b3.dev101 |
Sources
- osv: GHSA-j92p-c242-7hfx
- https://github.com/pyload/pyload/security/advisories/GHSA-j92p-c242-7hfx
- https://github.com/pyload/pyload/commit/e80c940cd604e60d93e3164429d4fc4aac54468d
- https://github.com/pyload/pyload
CVE-2026-75597 · published · modified · JSON
PyPI/pyload-ng CVE-2026-75597: medium 5.3, EPSS 0.30%
pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo
Action: Upgrade pyload-ng to 0.5.0b3.dev101 or later.
pip install pyload-ng==0.5.0b3.dev101Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0b3.dev101 | - |
Fixed versions
| 0.5.0b3.dev101 |
Sources
- osv: PYSEC-2026-4292
- https://github.com/pyload/pyload/security/advisories/GHSA-j92p-c242-7hfx
- https://github.com/pyload/pyload/commit/e80c940cd604e60d93e3164429d4fc4aac54468d
- https://github.com/pyload/pyload
- https://pypi.org/project/pyload-ng
- https://github.com/advisories/GHSA-j92p-c242-7hfx
- https://nvd.nist.gov/vuln/detail/CVE-2026-75597
CVE-2026-75597 · published · modified · JSON