Skip to content
OpenAdvisories

Package · PyPI

pyrofork

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-67720

    Pyrofork has a Path Traversal in download_media Method

    Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the download_media method before using them in file path construction. When downloading media, if the u…

    Mayuri-Chan pyrofork pyrofork PyPI