CVE-2026-50574

creationtimestamp| type| source ---|---|--- 2026-07-14 08:07:19+00:00| seen| https://gist.github.com/akib-h/a603a4aaf4aab24ac683c30e9a2ad670 2026-07-18 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwvuwkmrv2l...

CVE-2026-50574

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On...