Threats Tagged 'ghsa-f5pf-q7c7-m3vv'
View all threats tagged with 'ghsa-f5pf-q7c7-m3vv'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-f5pf-q7c7-m3vv'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-f5pf-q7c7-m3vv: Pixeldrain API key shared with unverified thirdparty sitesCVE-2026-54254 0 The cyberdrop-dl-patched tool versions 8.5.0 up to but not including 9.14.0 could leak a user's Pixeldrain API key to unverified third-party hosts. This occurs because the tool matches URLs by substring and uses the host from the input URL for API requests without strict validation, allowing malicious domains containing 'pixeldrain' as a substring to receive the API key in the Authorization header. Version 9.14.0 fixes this by enforcing exact domain matching. Users who have used Pixeldrain API keys with affected versions should consider those keys compromised and delete them. Join the discussion | GCVE Database | 07/15/2026, 22:00:53 UTC Added: 07/16/2026, 10:36:02 UTC |
Showing 1 to 1 of 1 result