{"action":"Upgrade cyberdrop-dl-patched to 9.14.0 or later.","affected":[{"fixed":"9.14.0","introduced":"8.5.0"}],"component":"cyberdrop-dl-patched","cve_ids":["CVE-2026-54254"],"ecosystem":"PyPI","epss":0.00528,"exploited":false,"fixed_versions":["9.14.0"],"ghsa_id":"GHSA-f5pf-q7c7-m3vv","id":"tcs_01M5KH5F6TRQTWXKEE7A1CEK12","modified_at":"2026-07-23T15:00:10.910036474Z","published_at":"2026-07-23T11:41:45.803654Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3460","https://github.com/Cyberdrop-DL/cyberdrop-dl/security/advisories/GHSA-f5pf-q7c7-m3vv","https://github.com/Cyberdrop-DL/cyberdrop-dl/commit/4479555ae3f9d56d7657d6179a5bac3123eb4e2b","https://docs.pixeldrain.com/questions_and_answers/#alternative-domain-names","https://github.com/Cyberdrop-DL/cyberdrop-dl","https://github.com/Cyberdrop-DL/cyberdrop-dl/releases/tag/9.14.0","https://pypi.org/project/cyberdrop-dl-patched","https://github.com/advisories/GHSA-f5pf-q7c7-m3vv","https://nvd.nist.gov/vuln/detail/CVE-2026-54254"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"PYSEC-2026-3460","url":"https://osv.dev/vulnerability/PYSEC-2026-3460"},{"source":"nvd","source_id":"CVE-2026-54254","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54254"}],"summary":"Pixeldrain API key shared with unverified thirdparty sites"}