MEDIUM6.3
PYSEC-2025-143
Details
wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/moneyprinterturbo
Introduced in:
0No fixed version published yet for moneyprinterturbo (pip). Pin to a known-safe version or switch to an alternative.