Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•28 views

yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

SummaryWhen yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. Impactyt-dlp maintainers assume the impact of this vulnerability to be high for anyone who uses...

8.8CVSS5.9AI score0.02056EPSS
SaveExploits2References7Affected Software1
Rows per page
Query Builder