youtube-dl vulnerabilities

1 known vulnerability in youtube-dl from Ytdl-org. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  yt-dlp: Incorrect Resource Transfer Between Spheres

  CVE-2024-38519Jul 2, 2024Yt-dlp

  `yt-dlp` and `youtube-dl` are command-line audio/video downloaders. Prior to the fixed versions, `yt-dlp` and `youtube-dl` do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder (and path t