Skip to content

pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions

Moderate severity GitHub Reviewed Published Apr 7, 2026 in pyload/pyload • Updated Apr 13, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts