streamlink@4.2.0 vulnerabilities

Streamlink is a command-line utility that extracts streams from various services and pipes them into a video player of choice.

Direct Vulnerabilities

Known vulnerabilities in the streamlink package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Race Condition

streamlink is a Streamlink is a command-line utility that extracts streams from various services and pipes them into a video player of choice.

Affected versions of this package are vulnerable to Race Condition in the DASH stream implementation, where queued segments were being downloaded even after the stream had been closed.

How to fix Race Condition?

Upgrade streamlink to version 5.3.0 or higher.

[,5.3.0)