Security
فارسی
All products

yt-dlp

PyPI · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy InjectionCVE-2023-46121 · GHSA-3CH3-JHC6-5R8XVersion ranges need review. yt-dlp PyPI Medium Fix reported
yt-dlp File Downloader cookie leakCVE-2023-35934 · GHSA-V8MC-9377-RWJJVersion ranges need review. yt-dlp PyPI Medium Fix reported
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link outputCVE-2026-55404 · GHSA-6V4J-43GG-VJ32Version ranges need review. yt-dlp PyPI High Fix reported
yt-dlp: Arbitrary code execution via manifest downloads with aria2cCVE-2026-50574 · GHSA-VX4Q-3CR2-7CG2Version ranges need review. yt-dlp PyPI High Fix reported
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)CVE-2026-50023 · GHSA-C6MH-FPJC-4PR3Version ranges need review. yt-dlp PyPI High Fix reported
yt-dlp: File Downloader cookie leak with curl CVE-2026-50019 · GHSA-F7J3-774F-RFHJVersion ranges need review. yt-dlp PyPI Medium Fix reported
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` optionCVE-2026-26331 · GHSA-G3GW-Q23R-PGQMVersion ranges need review. yt-dlp PyPI High Fix reported
yt-dlp: `--exec` command injection when using `%q` in yt-dlp on Windows (Bypass of CVE-2023-40581)CVE-2024-22423 · GHSA-HJQ6-52GW-2G7PVersion ranges need review. yt-dlp PyPI High Fix reported
yt-dlp File system modification and RCE through improper file-extension sanitizationCVE-2024-38519 · GHSA-79W7-VH3H-8G4JVersion ranges need review. yt-dlp PyPI High Fix reported
yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`CVE-2023-40581 · GHSA-42H4-V29R-42QGVersion ranges need review. yt-dlp PyPI High Fix reported
yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlpGHSA-69QJ-PVH9-C5WG yt-dlp PyPI High Fix reported
yt-dlp has dependency on potentially malicious third-party code in Douyu extractorsGHSA-3V33-3WMW-3785 yt-dlp PyPI Low Fix reported