yt-dlp vulnerabilities (Mageia)

4 vulnerabilities.

• yt-dlp Mageia yt-dlp: Arbitrary code execution via manifest downloads with aria2c CVE-2026-50574 Fix available 8.3 HighJune 12, 2026
• yt-dlp Mageia yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519) CVE-2026-50023 Fix available 8.3 HighJune 12, 2026
• yt-dlp Mageia yt-dlp: File Downloader cookie leak with curl CVE-2026-50019 Fix available 6.1 MediumJune 12, 2026
• yt-dlp Mageia yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option CVE-2026-26331 Public exploitFix available 8.8 HighFebruary 23, 2026