Skip to content
OpenAdvisories

Package · PyPI

yt-dlp

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-3v33-3wmw-3785

    yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

    ### Impact yt-dlp's DouyuTV and DouyuShow extractors used a `cdn.bootcdn.net` URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it ext…

    yt-dlp PyPI