Ytdl-org vulnerabilities
We track 1 vulnerability in Ytdl-org products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 2, 2024.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Ytdl-org vulnerabilities
- 7.8 High severity
yt-dlp: Incorrect Resource Transfer Between Spheres
`yt-dlp` and `youtube-dl` are command-line audio/video downloaders. Prior to the fixed versions, `yt-dlp` and `youtube-dl` do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder (and path t