Skip to content
OpenAdvisories

Vendor

Mayuri-Chan

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    Pyrofork has a Path Traversal in download_media Method

    Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the download_media method before using them in file path construction. When downloading media, if the u…