yt-dlp vulnerabilities

A feature-rich command-line audio/video downloader

2025.9.13.232728.dev0

4 years ago

11 hours ago

Known vulnerabilities in the yt-dlp package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Command Injection	[,2025.7.21)
M Reliance on Cookies without Validation and Integrity Checking	[,2023.9.24)
M Directory Traversal	[,2024.7.1)
H OS Command Injection	[2021.4.11,2024.4.9)
M External Control of System or Configuration Setting	[2022.10.4,2023.11.14)
H OS Command Injection	[2021.4.11,2023.9.24)
M Information Exposure	[,2023.7.6)
M Regular Expression Denial of Service (ReDoS)	[,2023.2.17)

472 VERSIONS IN TOTAL See all versions