Threats Tagged 'ghsa-j92p-c242-7hfx'
View all threats tagged with 'ghsa-j92p-c242-7hfx'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-j92p-c242-7hfx'
Click on any threat for detailed analysis and mitigation recommendations
pyLoad-ng versions prior to 0.5.0b3.dev101 have an unauthenticated access vulnerability in the /web/<path:filename> route, which allows rendering of sensitive Jinja2 templates without authentication. This bypasses the access control enforced on other direct routes. Additionally, an exception handling bug leaks internal error details, including Jinja2 variable names, in HTTP 500 responses to unauthenticated users. This enables attackers to enumerate valid templates and gain insight into internal application structure and system information. Join the discussion | GCVE Database | 10/09/2026, 16:40:30 UTC Added: 10/09/2026, 22:44:54 UTC |
Showing 1 to 1 of 1 result