Get real-time updates on Telegram
Verified
ghsa:GHSA-9Q47-3CM2-2RP8: pyload-ng = 0.5.0b3.dev101
pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header. Affected range: = 0.5.0b3.dev101.
Affected technology
pyload-ng · = 0.5.0b3.dev101
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source reports that an attacker could get past authentication checks under the conditions described by the source.
- Product
- pyload-ng
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-09 22:06:25.045838+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-9q47-3cm2-2rp8.html