basketcase (3.0.1), gridplayer (0.3.0) potentially affected by CVE-2023-35934 via yt-dlp (2022.6.22.1)

yt-dlp PYPI version 2022.6.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.1 - gridplayer 0.3.0 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

basketcase (>=1.0.5, <=2.0.0) potentially affected by CVE-2023-35934 via yt-dlp (2022.2.4)

yt-dlp PYPI version 2022.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.5, =2.0.0 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

deezer-downloader (2.0.0), kisskh-downloader (>=0.1.2, <=0.1.3a0) +12 more potentially affected by CVE-2023-35934 via yt-dlp (2022.11.11)

yt-dlp PYPI version 2022.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - deezer-downloader 2.0.0 - kisskh-downloader =0.1.2, =0.4.0, =0.14.0, =4.0.0rc1, =1.0.5, =2022.12.4, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.5 -...

basketcase (4.0.0), gpt3discord (>=11.7.1, <=12.3.8) +10 more potentially affected by CVE-2023-35934 via yt-dlp (>=2023.1.6, <=2023.6.22)

yt-dlp PYPI version =2023.1.6, =11.7.1, =0.5.0, =0.1.0, =0.0.1, =0.0.3, =0.3.0, =2023.3.7, =2023.6.30.post1 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

ricecooker (>=0.7.0b4, <=0.7.1) potentially affected by CVE-2023-35934 via yt-dlp (2022.3.8.1)

yt-dlp PYPI version 2022.3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ricecooker =0.7.0b4, =0.7.1 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

gridplayer (>=0.4.0, <=0.4.2) potentially affected by CVE-2023-35934 via yt-dlp (2022.6.29)

yt-dlp PYPI version 2022.6.29 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gridplayer =0.4.0, =0.4.2 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

vk-url-scraper (>=0.2.1, <=0.3.5) potentially affected by CVE-2023-35934 via yt-dlp (2022.5.18)

yt-dlp PYPI version 2022.5.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper =0.2.1, =0.3.5 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

basketcase (>=3.1.0, <=3.1.1) potentially affected by CVE-2023-35934 via yt-dlp (2022.10.4)

yt-dlp PYPI version 2022.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =3.1.0, =3.1.1 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

basketcase (3.0.2), gridplayer (0.4.3) +1 more potentially affected by CVE-2023-35934 via yt-dlp (2022.7.18)

yt-dlp PYPI version 2022.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.2 - gridplayer 0.4.3 - vk-url-scraper =0.3.8, =0.3.10 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

basketcase (4.0.0), gpt3discord (>=11.7.1, <=12.3.8) +10 more potentially affected by CVE-2023-35934 via yt-dlp (>=2023.1.6, <=2023.6.22)

yt-dlp PYPI version =2023.1.6, =11.7.1, =0.5.0, =0.1.0, =0.0.1, =0.0.3, =0.3.0, =2023.3.7, =2023.6.30.post1 Source cves: CVE-2023-35934 Source advisory: GHSA-V8MC-9377-RWJJ...

CVE-2023-35934 yt-dlp File Downloader cookie leak

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

CVE-2023-35934

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

CVE-2023-35934 yt-dlp File Downloader cookie leak

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

CVE-2023-35934

CVE-2023-35934 affects yt-dlp prior to 2023.07.06 and nightly 2023.07.06.185519. The issue: during file downloads, yt-dlp or its external downloaders may leak cookies by sending them as a Cookie header, including in the info JSON, causing cookies to be sent to domains/paths not scoped. All native...

CVE-2023-35934

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

CVE-2023-35934 yt-dlp File Downloader cookie leak

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

CVE-2023-35934

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

yt-dlp information leakage vulnerability

yt-dlp is based on the youtube-dl branch of the now-inactive youtube-dlc. An information disclosure vulnerability previously existed in yt-dlp version 2023.07.06, which stemmed from an external downloader used by the app that could leak cookies when HTTP redirected to other hosts...

CVE-2023-35934

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

CVE-2023-35934: Exposure of Sensitive Information to an Unauthorized Actor

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...