PT-2026-53569 · Pypi · Pyload-Ng

Published 2026-06-29 · Updated 2026-06-29

OSV

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.

Fix

Related Identifiers

PYSEC-2026-494

Affected Products

Pyload-Ng

References · 7

• https://osv.dev/vulnerability/PYSEC-2026-494 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0435 · Security Note
• https://github.com/pyload/pyload/commit/431ea6f0371d748df66b344a05ca1a8e0310cff3 · Note
• https://github.com/pyload/pyload · Note
• https://github.com/advisories/GHSA-6jmx-pv77-wm5w · Note
• https://pypi.org/project/pyload-ng · Note
• https://huntr.dev/bounties/a3e32ad5-caee-4f43-b10a-4a876d4e3f1d · Note