yt-dlp vulnerabilities (PyPI)
12 vulnerabilities.
-
yt-dlpPyPI yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output 7.5 High -
yt-dlpPyPI yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp 7.5 High -
yt-dlpPyPI yt-dlp: Arbitrary code execution via manifest downloads with aria2c 8.3 High -
yt-dlpPyPI yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519) 8.3 High -
yt-dlpPyPI yt-dlp: File Downloader cookie leak with curl 6.1 Medium -
yt-dlpPyPI yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option 8.8 High -
yt-dlpPyPI yt-dlp has dependency on potentially malicious third-party code in Douyu extractors No score -
yt-dlpPyPI yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization 7.8 High -
yt-dlpPyPI yt-dlp `--exec` command injection when using `%q` in yt-dlp on Windows 8.4 High -
yt-dlpPyPI Generic Extractor MITM Vulnerability in yt-dlp 5.0 Medium -
yt-dlpPyPI yt-dlp command injection when using `%q` in `--exec` on Windows 8.4 High -
yt-dlpPyPI yt-dlp File Downloader cookie leak 6.1 Medium