gdown vulnerabilities

1 known vulnerability in gdown from Wkentaro. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  gdown: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-40491Apr 18, 2026Wkentaro

  gdown is a Google Drive public file/folder downloader. Versions prior to 5.2.2 are vulnerable to a Path Traversal attack within the extractall functionality. When extracting a maliciously crafted ZIP or TAR archive, the library fails to sanitize or validate th