yt-dlp Downstream Command Injection via --write-link (CVE-2026-55404)

github.com 2026-07-09查看中文 →

Security AdvisoryCVE-2026-55404Highyt-dlp

Affected:

yt-dlp < 2026.7.4

Fixed in:

2026.7.4

Referenced CVEs: CVE-2026-55404 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Renci.SshNet ScpClient Path Traversal Vulnerability Patch and POC 2026-08-18 dirkey vulnerability fix and security hardening advisory (GHSA-x5pq-m9p8-14vx) 2026-08-18 SSH.NET ScpClient Directory Traversal Vulnerability (CVE-2025-48798) Advisory 2026-08-18 goshsv2 WebDAV listener ignores read-only, upload-only, and no-delete flags 2026-08-18 NVIDIA TensorRT CVE-2024-63832 Heap-Buffer-Overflow READ in Gemm Adapter 2026-08-18

Offline Archive

Offline screenshot & PDF are Pro-exclusive