9 matches found
yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`
Impactyt-dlp allows the user to provide shell commands to be executed at various stages in its download process through the --exec flag. This flag allows output template expansion in its argument, so that video metadata values may be used in the shell commands. The metadata fields can be combined...
8.3CVSS7.5AI score0.01292EPSS
SaveExploits1References9Affected Software1
20