| Title |
Severity |
Exploit |
Date |
Affected Version |
|
CVE-2025-57751
|
High
|
|
Aug 21, 2025
|
< 0.5.0b3.dev92
|
|
CVE-2025-55156
|
High
|
|
Aug 12, 2025
|
< 0.5.0b3.dev91
|
|
CVE-2025-54802
|
Critical
|
|
Aug 4, 2025
|
< 0.5.0b3.dev90
|
|
Pyload log Injection via API /json/add_package in add_name parameter
|
Medium
|
|
Jul 30, 2025
|
<= 0.5.0b3.dev89
|
|
CVE-2025-54140
|
High
|
|
Jul 21, 2025
|
== 0.5.0b3.dev89
>= 0.5.0b3.dev89 < 0.5.0b3.dev90
|
|
CVE-2025-53890
|
Critical
|
|
Jul 15, 2025
|
< 0.20
|
|
CVE-2025-7346
|
High
|
|
Jul 8, 2025
|
<= 0.5.0b3.dev88
|
|
CVE-2024-32880
|
Critical
|
|
Apr 26, 2024
|
<= 0.5.0
|
|
CVE-2024-24808
|
Medium
|
|
Feb 6, 2024
|
< 0.5.0b3.dev79
|
|
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
|
Medium
|
|
Feb 5, 2024
|
< 0.5.0b3.dev79
|
pyload-ng