Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

yt-dlp — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in yt-dlp, with AI-generated Chinese analysis, references, and POCs.

Vendor: yt-dlp

CVE IDTitleCVSSSeverityPublished
CVE-2026-55404 yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output CWE-74 7.5 High2026-07-08
CVE-2026-50019 yt-dlp: File Downloader cookie leak with curl CWE-200 6.1 Medium2026-06-23
CVE-2026-50574 yt-dlp: Arbitrary code execution via manifest downloads with aria2c CWE-74 8.3 High2026-06-23
CVE-2026-50023 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519) CWE-641 8.3 High2026-06-23
CVE-2026-26331 yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option CWE-78 8.8 High2026-02-24
CVE-2025-54072 yt-dlp allows `--exec` command injection when using placeholder on Windows CWE-78 7.5 High2025-07-22
CVE-2024-38519 yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization CWE-669 7.8 High2024-07-02
CVE-2024-22423 yt-dlp `--exec` command injection when using `%q` in yt-dlp on Windows CWE-78 8.4 High2024-04-09
CVE-2023-46121 Generic Extractor MITM Vulnerability in yt-dlp CWE-444 5.0 Medium2023-11-14
CVE-2023-40581 yt-dlp command injection when using `%q` in `--exec` on Windows CWE-78 8.4 High2023-09-25
CVE-2023-35934 yt-dlp File Downloader cookie leak CWE-200 6.1 Medium2023-07-06

All 11 known CVE vulnerabilities affecting yt-dlp with full Chinese analysis, references, and POCs where available.