EUVD-2026-71224

DouyinTikTokDownloadAPI through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/hybrid/videodata endpoints that allows unauthenticated attackers to fetch arbitrary URLs by supplying a url query parameter. Attackers can request internal services including...

MAL-2025-36933 Malicious code in tiktokdl-api (npm)

The package tiktokdl-api was found to contain malicious code...