API - API Security Blog

CVE-2025-55156

pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the parameter add_links in API /json/add_package is vulnerable to SQL Injection. Attackers c ...

August 11, 2025

GHSA-9QPH-PXFM-Q9G4

creation_timestamp| type| source ---|---|--- 2025-08-11 20:56:24+00:00| seen|...Read More ...

August 11, 2025

CVE-2025-54063

creation_timestamp| type| source ---|---|--- 2025-08-11 20:33:39+00:00| seen|...Read More ...

August 11, 2025

CVE-2025-54132

creation_timestamp| type| source ---|---|--- 2025-08-11 20:16:57+00:00| seen|...Read More ...

August 11, 2025

CVE-2025-53188

creation_timestamp| type| source ---|---|--- 2025-08-11 21:58:46+00:00| seen|...Read More ...

August 11, 2025

GHSA-X34M-39XW-G2WR

creation_timestamp| type| source ---|---|--- 2025-08-11 21:35:54+00:00| seen|...Read More ...

August 11, 2025

CVE-2025-49090

creation_timestamp| type| source ---|---|--- 2025-08-11 21:59:27+00:00| seen|...Read More ...

August 11, 2025

CVE-2025-55156 PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the parameter add_links in API /json/add_package is vulnerable to SQL Injection. Attackers c ...

August 11, 2025