{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.0b3.dev89"}],"component":"pyload-ng","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3wwm-hjv7-23r3","id":"tcs_01M5KEWPVHC3G6AGAS0BV1QVM5","modified_at":"2025-07-30T14:23:12.132253Z","published_at":"2025-07-30T13:18:38Z","references":["https://osv.dev/vulnerability/GHSA-3wwm-hjv7-23r3","https://github.com/pyload/pyload/security/advisories/GHSA-3wwm-hjv7-23r3","https://github.com/pyload/pyload/commit/ddf8a48b83aaf36052b08732c424cffcf9ffccca","https://github.com/pyload/pyload"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-3wwm-hjv7-23r3","url":"https://osv.dev/vulnerability/GHSA-3wwm-hjv7-23r3"}],"summary":"Pyload log Injection via API /json/add_package in add_name parameter"}