YT
Product
Yt-dlp
by Yt-dlp Project · last CVE Jul 8, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 0Low 1
Watch

Add Yt-dlp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3566
9.8
7%
Apr 10
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific…
Affected: 2021.04.11 before 2024.04.09
CVE-2024-22423
9.8
1%
Apr 9
yt-dlp is a youtube-dl fork with additional features and fixes
Affected: 2021.04.11 before 2024.04.09
CVE-2026-50574
9.6
0%
Jun 23
yt-dlp: Arbitrary code execution via manifest downloads with aria2c
Affected: before 2026.06.09
CVE-2026-50023
9.6
1%
Jun 23
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
Affected: before 2026.06.09
Showing 4