Advisories for Pypi/Mangadex-Downloader package

2022

mangadex-downloader vulnerable to unauthorized file reading

When using file:<location> command and <location> is web URL location (http, https). mangadex-downloader will try to open and read a file in local disk if the content from online file is exist-as-a-file in victim computer So far, the app only read the files and not execute it. But still, when someone reading your files without you knowing, it's very scary.