Marcopiovanello vulnerabilities
We track 2 vulnerabilities in Marcopiovanello products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Marcopiovanello vulnerabilities
- 7.5 High severity
yt-dlp-web-ui: NULL Pointer Dereference
yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the server. Attackers can send a single request with a url value like --version, causing
- 8.3 High severity
yt-dlp-web-ui: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It