Vulnerabilities in Pyload
45 resultsCVE-2026-33314MEDIUMpyload-ng: Improper Authentication and Origin Validation ErrorEPSS 0.2%CVE-2026-46561MEDIUMpyLoad: SSRF via HTTP Redirect Bypass in parse_urls APIEPSS 0.2%CVE-2026-42312MEDIUMpyload-ng: non-admin SETTINGS users can disable outbound TLS peer verificationEPSS 0.2%CVE-2026-40594MEDIUMpyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)EPSS 0.2%CVE-2026-35586MEDIUMAuthorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ngEPSS 0.1%