Lucene search
+L

9 matches found

PyPA
PyPA
added 2026/07/07 11:45 a.m.10 views

yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`

Impactyt-dlp allows the user to provide shell commands to be executed at various stages in its download process through the --exec flag. This flag allows output template expansion in its argument, so that video metadata values may be used in the shell commands. The metadata fields can be combined...

8.3CVSS7.5AI score0.01292EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder