VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 8, 2024· Updated Jun 17, 2026

CVE-2024-21644

CVE-2024-21644

Description

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRET_KEY variable. This issue has been patched in version 0.5.0b3.dev77.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
pyload-ngPyPI
< 0.5.0b3.dev770.5.0b3.dev77

Affected products

5
  • Pyload/Pyload4 versions
    cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*range: <=0.4.9
    • cpe:2.3:a:pyload:pyload:0.5.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:pyload:pyload:0.5.0:beta2:*:*:*:*:*:*
    • (no CPE)range: < 0.5.0b3.dev77
  • ghsa-coords
    pkg:pypi/pyload-ng
    Range: < 0.5.0b3.dev77

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.