Lucene search
+L

14 matches found

OSV
OSV
added 2026/07/07 11:45 a.m.8 views

PYSEC-2026-2064 yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`

Impact yt-dlp allows the user to provide shell commands to be executed at various stages in its download process through the --exec flag. This flag allows output template expansion in its argument, so that video metadata values may be used in the shell commands. The metadata fields can be combine...

8.3CVSS7.5AI score0.01292EPSS
SaveExploits1References9
Rows per page
Query Builder