Launch Week Day 1: Announcing Security Design Review
UNKNOWN PyPI

Duplicate Advisory: pyload-ng vulnerable to RCE with js2py sandbox escape

GHSA-25pw-q952-x37g

Published ยท Modified

Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r9pp-r4xf-597r. This link is maintained to preserve external references.

Original Description

An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request.

Ready to move

Start Securing

Free, no credit card | First findings in minutes