https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:48:59.292771+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-42314 CVE-2026-42314 — pyLoad: Path Traversal via Package Folder Name 2026-10-06T09:48:59.307246+00:00

Affected: pyload

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, package folder names are sanitized using insufficient string replacement. The pattern ....// becomes .._ after replacement (partial removal), leaving .. which can be exploited when the path is later resolved by the OS. This vulnerability is fixed in 0.5.0b3.dev100.