CVE-2024-39205
Critical · 9.8CVSS
9.8
EPSS
16.5%
Published
Oct 28, 2024
CISA due date
—
The record
An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | pyload-ng | 0 | No fix |