CVE-2023-35934 yt-dlp File Downloader cookie leak

🗓️ 06 Jul 2023 19:39:49Reported by GitHub_MType

yt-dlp File Downloader cookie leak vulnerability fixed in version 2023.07.0

Reporter	Title	Published	Views	Family All 39
AlpineLinux	CVE-2023-35934	6 Jul 202319:39	–	alpinelinux
Circl	CVE-2023-35934	7 Jul 202300:20	–	circl
CNNVD	yt-dlp 信息泄露漏洞	6 Jul 202300:00	–	cnnvd
CVE	CVE-2023-35934	6 Jul 202319:39	–	cve
Debian CVE	CVE-2023-35934	6 Jul 202319:39	–	debiancve
EUVD	EUVD-2023-2146	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 38 Update: yt-dlp-2023.07.06-1.fc38	9 Jul 202302:19	–	fedora
Fedora	[SECURITY] Fedora 38 Update: youtube-dl-2023.08.04.git86e3cf5-1.20230815git86e3cf5.fc38	25 Aug 202301:29	–	fedora
Fedora	[SECURITY] Fedora 37 Update: youtube-dl-2023.07.30.git2efc8de-1.20230815git2efc8de.fc37	25 Aug 202300:43	–	fedora
Fedora	[SECURITY] Fedora 37 Update: yt-dlp-2023.07.06-1.fc37	12 Jul 202301:21	–	fedora

[
  {
    "vendor": "yt-dlp",
    "product": "yt-dlp",
    "versions": [
      {
        "version": "yt-dlp < 2023.07.06",
        "status": "affected"
      },
      {
        "version": "yt-dlp < nightly 2023.07.06.185519",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2023.07.06.185519
github	www.github.com/yt-dlp/yt-dlp/releases/tag/2023.07.06
github	www.github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IM44RJL2MR2WG3ZY354C5IUEEZUJGEVA/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HEOKCGVONGHR2SYUIXU33A4MKXZBDP6L/
github	www.github.com/yt-dlp/yt-dlp/commit/f8b4bcc0a791274223723488bfbfc23ea3276641
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/M7E7CQ5S5KMZHAMCNU7V7KYNBVCPLBHG/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/5X6YT6AQE5FHM5VTQLKKJXSYBLLJF26W/
github	www.github.com/yt-dlp/yt-dlp/commit/3121512228487c9c690d3d39bfd2579addf96e07
github	www.github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729