yt-dlp Latest Vulnerabilities

Latest vulnerabilities published by yt-dlp

JSON RSS CSV 🔔 Create Alert Trigger

22 July 2025

Remote Code Execution Vulnerability in yt-dlp by Yt-dlp
CVE-2025-54072
Yt-dlpYt-dlp7.5HIGH

2 July 2024

yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization
CVE-2024-38519
Yt-dlpYt-dlp7.8HIGH

9 April 2024

Remote Code Execution Risk in yt-dlp due to Insufficient Input Validation
CVE-2024-22423
Yt-dlpYt-dlp8.4HIGH

15 November 2023

Generic Extractor MITM Vulnerability in yt-dlp
CVE-2023-46121
Yt-dlpYt-dlp5MEDIUM

25 September 2023

yt-dlp command injection when using `%q` in `--exec` on Windows
CVE-2023-40581
Yt-dlpYt-dlp8.4HIGH

6 July 2023

yt-dlp File Downloader cookie leak
CVE-2023-35934
Yt-dlpYt-dlp6.1MEDIUM