GHSA-69QJ-PVH9-C5WG yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

Summary yt-dlp's --exec option is vulnerable to arbitrary command injection when handling untrusted metadata if the argument uses standard string formatting e.g. %titles or other unsafe conversions. An attacker could achieve remote code execution on the user's machine via maliciously crafted...

Contiki Input Validation Error Vulnerability

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. Contiki suffers from an input validation error vulnerability that stems from the fact that the functionality used to unwrap RPL extension headers does not check for unsafe integer conversions, allowing a...