Skip to content
OpenAdvisories

Package · Ubuntu

youtube-dl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-55404

    yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output

    yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpage_url or filename metadata withou…

    yt-dlp yt-dlp yt-dlp yt-dlp Debian Ubuntu PyPI