Skip to content
OpenAdvisories

Vendor

marcopiovanello

3 known vulnerabilities.

Products

yt-dlp-web-ui 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-109967

    yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats

    yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the server. Attackers can send a single request with a url value like --version, causing…

    marcopiovanello yt-dlp-web-ui
  • High 8.3
    CVE-2026-93371

    marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

    A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. I…

    marcopiovanello yt-dlp-web-ui