{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.0"}],"component":"pyload-ng","cve_ids":["CVE-2024-47821"],"ecosystem":"PyPI","epss":0.00682,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w7hq-f2pj-c53g","id":"tcs_01M5KGN1FGQCGPNQSB99T2P4M1","modified_at":"2026-05-21T15:00:28.414384626Z","published_at":"2024-10-25T23:15:02.530Z","references":["https://osv.dev/vulnerability/PYSEC-2024-302","https://github.com/pyload/pyload/security/advisories/GHSA-w7hq-f2pj-c53g"],"severity":{"label":"low","score":2.3},"sources":[{"source":"osv","source_id":"PYSEC-2024-302","url":"https://osv.dev/vulnerability/PYSEC-2024-302"}],"summary":"pyLoad is a free and open-source Download Manager. The folder `/.pyload/scripts` has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executa"}