Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/23 10:13 p.m.9 views

yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

Summary When yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. Impact yt-dlp maintainers assume the impact of this vulnerability to be high for anyone who us...

8.8CVSS5.7AI score0.01596EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder