Verified

ghsa:GHSA-FR26-JJHM-638C: pyload-ng <= 0.5.0b3.dev101

pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=). Affected range: <= 0.5.0b3.dev101.

Affected technology

pyload-ng · <= 0.5.0b3.dev101
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 13-Oct-2026 07:48 UTC

Product: pyload-ng
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-09 22:06:25.045838+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-fr26-jjhm-638c.html