Skip to content
OpenAdvisories

Package · Debian

youtube-dl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2024-38519

    yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

    `yt-dlp` and `youtube-dl` are command-line audio/video downloaders. Prior to the fixed versions, `yt-dlp` and `youtube-dl` do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder (and path …

    yt-dlp ytdl-org yt-dlp youtube-dl Debian Ubuntu Alpine PyPI