Skip to content
OpenAdvisories

Vendor

zackees

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.6

    zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection

    A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file src/transcribe_anything/ytldp_download.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection…