CVE-2025-50983

An SQL Injection vulnerability exists in readarr version 0.4.15.2787 within the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint. The application fails to properly sanitize user-supplied input, enabling attackers to execute arbitrary SQL commands against the backend SQLite database...