Browse CVEs

HIGH 8.8 CVE-2026-55404 yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link optio… Yt Dlp 2026.07.04+ Fix from $1,9502026-07-08 CRITICAL 9.6 CVE-2026-50023 yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitra… Yt Dlp 2026.06.09+ Fix from $2,3002026-06-23 CRITICAL 9.6 CVE-2026-50574 yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (s… Yt Dlp 2026.06.09+ Fix from $2,3002026-06-23 HIGH 7.4 CVE-2026-50019 yt-dlp is a command-line audio/video downloader. From 2023.09.24 until 2026.06.09, if curl is used as an external downloader for yt-dlp, cookies may … Yt Dlp 2026.06.09+ Fix from $1,9502026-06-23 HIGH 8.8 CVE-2026-26331 yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt-dlp's `--netrc-cmd` command-… Yt Dlp 2026.02.21+ Fix from $1,9502026-02-24 HIGH 8.1 CVE-2025-54072 yt-dlp is a feature-rich command-line audio/video downloader. In versions 2025.06.25 and below, when the --exec option is used on Windows with the de… Yt Dlp 2025.07.21+ Fix from $1,9502025-07-22 CRITICAL 9.8 CVE-2024-22423 yt-dlp is a youtube-dl fork with additional features and fixes. The patch that addressed CVE-2023-40581 attempted to prevent RCE when using `--exec` … Yt Dlp 2024.04.09+ Fix from $2,3002024-04-09 HIGH 7.8 CVE-2023-40581 yt-dlp is a youtube-dl fork with additional features and fixes. yt-dlp allows the user to provide shell command lines to be executed at various stage… Yt Dlp 2023.09.24+ Fix from $1,9502023-09-25