CVE-2025-55156

pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the parameter add_links in API /json/add_package is vulnerable to SQL Injection. Attackers can modify or delete data in the database, causing data errors or loss. This issue has been patched in version 0.5.0b3.dev91.

• CWE-89

• https://github.com/pyload/pyload/blob/develop/src/pyload/core/database/file_database.py#L271
• https://github.com/pyload/pyload/commit/134edcdf6e2a10c393743c254da3d9d90b74258f
• https://github.com/pyload/pyload/security/advisories/GHSA-pwh4-6r3m-j2rf

Published

Aug 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55150Stirling-PDF is a locally hosted web application that perfor…9.8
• CVE-2025-55151Stirling-PDF is a locally hosted web application that perfor…9.8
• CVE-2025-55152oak is a middleware framework for Deno's native HTTP server,…5.3
• CVE-2025-55153Rejected reason: This CVE is a duplicate of another CVE.
• CVE-2025-55154ImageMagick is free and open-source software used for editin…7.8
• CVE-2025-55155Mantis Bug Tracker (MantisBT) is an open source issue tracke…5.4
• CVE-2025-55157Vim is an open source, command line text editor. In versions…8.8
• CVE-2025-55158Vim is an open source, command line text editor. In versions…8.8
• CVE-2025-55159slab is a pre-allocated storage for a uniform data type. In …5.1
• CVE-2025-5516A vulnerability, which was classified as problematic, was fo…4.8
• CVE-2025-55160ImageMagick is free and open-source software used for editin…5.3
• CVE-2025-55161Stirling-PDF is a locally hosted web application that perfor…9.8