{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.0b3.dev97"}],"component":"pyload-ng","cve_ids":["CVE-2026-41133"],"ecosystem":"PyPI","epss":0.00325,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-66hx-chf7-3332","id":"tcs_01M5KF2MM022K1D47JJQ1D1262","modified_at":"2026-07-13T16:42:54.687684300Z","published_at":"2026-04-14T23:38:35Z","references":["https://osv.dev/vulnerability/GHSA-66hx-chf7-3332","https://github.com/pyload/pyload/security/advisories/GHSA-66hx-chf7-3332","https://nvd.nist.gov/vuln/detail/CVE-2026-41133","https://github.com/pyload/pyload/commit/e95804fb0d06cbb07d2ba380fc494d9ff89b68c1","https://github.com/pyload/pyload"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-66hx-chf7-3332","url":"https://osv.dev/vulnerability/GHSA-66hx-chf7-3332"}],"summary":"pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)"}