Skip to content
OpenAdvisories

Package · Debian

youtube-dl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2024-38519

    yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

    `yt-dlp` and `youtube-dl` are command-line audio/video downloaders. Prior to the fixed versions, `yt-dlp` and `youtube-dl` do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder (and path …

    yt-dlp ytdl-org yt-dlp youtube-dl Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2023-35934

    yt-dlp File Downloader cookie leak

    yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments diffe…

    yt-dlp yt-dlp yt-dlp yt-dlp Debian Ubuntu Alpine PyPI