High severity7.5NVD Advisory· Published May 8, 2026· Updated May 12, 2026
CVE-2026-38361
CVE-2026-38361
Description
An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload.py in the Upload function and max_file_size parameter, dash_uploader/configure_upload.py components
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- docs.python.org/3/library/functions.htmlnvdProduct
- github.com/fohrloop/dash-uploader/blob/stable/dash_uploader/httprequesthandler.pynvdProduct
- github.com/fohrloop/dash-uploader/issues/153nvdProduct
- libraries.io/pypi/dash-uploadernvdProduct
- pepy.tech/project/dash-uploadernvdProduct
- pypi.org/project/dash-uploader/nvdProduct
- pypistats.org/packages/dash-uploadernvdProduct
News mentions
0No linked articles in our index yet.