1 matches found
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
Summary When yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. Impact yt-dlp maintainers assume the impact of this vulnerability to be high for anyone who us...
8.8CVSS5.7AI score0.01596EPSS
SaveExploits2References5Affected Software1
20