{"action":"Upgrade cyberdrop-dl-patched to 9.14.0 or later.","affected":[{"fixed":"9.14.0","introduced":"8.5.0"}],"component":"cyberdrop-dl-patched","cve_ids":["CVE-2026-54254"],"ecosystem":"PyPI","epss":0.00528,"exploited":false,"fixed_versions":["9.14.0"],"ghsa_id":"GHSA-f5pf-q7c7-m3vv","id":"tcs_01M5KFEHT34WVRS6B1RC281MNW","modified_at":"2026-07-23T15:11:45.835725135Z","published_at":"2026-07-15T22:00:53Z","references":["https://osv.dev/vulnerability/GHSA-f5pf-q7c7-m3vv","https://github.com/Cyberdrop-DL/cyberdrop-dl/security/advisories/GHSA-f5pf-q7c7-m3vv","https://github.com/Cyberdrop-DL/cyberdrop-dl/commit/4479555ae3f9d56d7657d6179a5bac3123eb4e2b","https://docs.pixeldrain.com/questions_and_answers/#alternative-domain-names","https://github.com/Cyberdrop-DL/cyberdrop-dl","https://github.com/Cyberdrop-DL/cyberdrop-dl/releases/tag/9.14.0"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f5pf-q7c7-m3vv","url":"https://osv.dev/vulnerability/GHSA-f5pf-q7c7-m3vv"}],"summary":"Pixeldrain API key shared with unverified thirdparty sites"}