Rezultati pretraživanja za 'Proizvođač: yt-dlp_project'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-55404 | 7.5 | yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpage_url or filename metada | 2026-07-13 17:01:13 | 2026-07-08 20:16:52 |
| CVE-2026-50019 | 6.1 | yt-dlp is a command-line audio/video downloader. From 2023.09.24 until 2026.06.09, if curl is used as an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect or when the host for download fragments differs fr | 2026-06-26 20:12:44 | 2026-06-23 17:17:02 |
| CVE-2026-50023 | 8.3 | yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as .desktop, .url, .webloc) to the user's filesystem, bypassing the remedi | 2026-06-26 20:12:25 | 2026-06-23 17:17:03 |
| CVE-2026-50574 | 8.3 | yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt-dlp passes insufficiently sanitized input to aria2c that allows an att | 2026-06-26 20:11:40 | 2026-06-23 17:17:03 |
| CVE-2024-3566 | 9.8 | A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied. | 2026-05-15 15:03:11 | 2024-04-10 16:15:16 |
| CVE-2026-26331 | 8.8 | yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt-dlp's `--netrc-cmd` command-line option (or `netrc_cmd` Python API parameter) is used, an attacker could achieve arbitrary comman | 2026-02-25 19:32:30 | 2026-02-24 03:16:01 |
| CVE-2024-22423 | 8.3 | yt-dlp is a youtube-dl fork with additional features and fixes. The patch that addressed CVE-2023-40581 attempted to prevent RCE when using `--exec` with `%q` by replacing double quotes with two double quotes. However, this escaping is not sufficient | 2026-01-05 15:56:33 | 2024-04-09 18:15:08 |
| CVE-2025-54072 | 7.5 | yt-dlp is a feature-rich command-line audio/video downloader. In versions 2025.06.25 and below, when the --exec option is used on Windows with the default placeholder (or {}), insufficient sanitization is applied to the expanded filepath, allowing fo | 2025-10-09 15:59:25 | 2025-07-22 22:15:37 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/1
Zapisa po stranici: