1 matches found
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
SummaryWhen yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. Impactyt-dlp maintainers assume the impact of this vulnerability to be high for anyone who uses...
8.8CVSS5.9AI score0.02056EPSS
SaveExploits2References7Affected Software1
20