CVE-2024-38519

creationtimestamp| type| source ---|---|--- 2024-07-05 05:03:14+00:00| published-proof-of-concept| https://t.me/CNArsenal/2756 2024-07-05 05:10:16+00:00| published-proof-of-concept| Telegram/V1bxD-jcgLJhIO9UiHe8d1hYmveopVgEe6OZN4ebF4Ex04 2024-07-05 15:57:33+00:00| seen|...

DEBIAN-CVE-2024-38519

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp and youtube-...