pyload-ng vulnerabilities

The free and open-source Download Manager written in pure Python

0.5.0b3.dev93

6 years ago

17 days ago

Known vulnerabilities in the pyload-ng package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling	[,0.5.0b3.dev92)
H SQL Injection	[,0.5.0b3.dev91)
C Arbitrary Code Injection	[,0.5.0b3.dev89)
C Directory Traversal	[,0.5.0b3.dev90)
M Arbitrary Code Injection	[,0.5.0b3.dev90)
H Directory Traversal	[,0.5.0b3.dev90)
C Improper Preservation of Permissions	[,0.5.0b3.dev90)
M Open Redirect	[,0.5.0b3.dev79)
C Command Injection	[,0.5.0b3.dev87)
C Improper Control of Generation of Code ('Code Injection')	[,0.5.0b3.dev87)
C Unrestricted Upload of File with Dangerous Type	[,0.5.0b3.dev85)
M Open Redirect	[,0.5.0b3.dev79)
C Cross-site Request Forgery (CSRF)	[,0.5.0b3.dev78)
M Improper Output Neutralization for Logs	[,0.5.0b3.dev77)
H Insertion of Sensitive Information into Externally-Accessible File or Directory	[,0.5.0b3.dev77)
H Directory Traversal	[,0.5.0b3.dev75)
M Cross-site Scripting (XSS)	[,0.5.0b3.dev42)
H Improper Input Validation	[,0.5.0b3.dev44)
M Improper Input Validation	[0,0.5.0b3.dev40)
C Arbitrary Code Injection	[,0.5.0b3.dev31)
H Insufficient Session Expiration	[0,0.5.0b3.dev38)
L Improper Restriction of Rendered UI Layers or Frames	[,0.5.0b3.dev33)
L Sensitive Cookie in HTTPS Session Without "Secure" Attribute	[,0.5.0b3.dev32)
M Prototype Pollution	[,0.5.0b3.dev41)

98 VERSIONS IN TOTAL