| Bug | bookworm | trixie | forky | sid | Description |
|---|
| TEMP-1147154-ECE4C7 | vulnerable | vulnerable | fixed | fixed | GHSA-mjwj-v5mr-cmcg: PAR2 symlink bypass allows pickle remote code execution. |
| TEMP-1147154-EA5624 | vulnerable | vulnerable | fixed | fixed | GHSA-q326-jpxx-jmjc: __wrapped__ dispatch bypass allows unauthenticated API access |
| TEMP-1145563-F10EE7 | vulnerable | vulnerable | fixed | fixed | GHSA-75g3-96fr-7p2r: SABnzbd PAR2 path traversal enabling cross-job __verified__ pickle RCE |
| TEMP-1145563-076BF6 | vulnerable | vulnerable | fixed | fixed | GHSA-rgqj-28c2-gxwp: Unauthenticated API mode confusion allows configuration takeover and remote code execution |
| TEMP-1144839-91D17B | vulnerable | fixed | fixed | fixed | GHSA-xrfq-jhgh-wqch: Authentication bypass in the web interface |
| CVE-2023-34237 | vulnerable (no DSA) | fixed | fixed | fixed | SABnzbd is an open source automated Usenet download tool. A design fla ... |