← Back to browse · API

CVE-2024-39205

Severity

CRITICAL

CVSS

9.8

EPSS

0.16409

Risk score

44.94

CISA KEV

No

PoC

No

Published

2024-10-28

Modified

2024-10-30

First seen

2026-08-07

Aliases

EUVD-2024-2864, GHSA-R9PP-R4XF-597R, PYSEC-2026-499

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-2864

Description

An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request.

References