p PatchFirst

PatchFirst · Latest vulnerabilities

yt-dlp vulnerabilities

Vulnerability published for yt-dlp in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. openSUSE-SU-2026:22142-1

    Not ratedFix available

    Security update for yt-dlp

    This update for yt-dlp fixes the following issues: Changes in yt-dlp: Update to version 2026.08.19: * utils: float_or_none: Catch OverflowError * americastestkitchen: Fix season/series extraction * apple: Rework extractors * ard: Remove dead extractor * bandcamp: Support browser impersonation * bfmtv: Fix extractor * instagram: Fix logged-in extraction * showroom: Rework extractors * tiktok: Fix extractor * tiktok: Fix formats extraction * tiktok: Support share URLs * twitter: broadcast: Fix events handling * vimeo: Remove ios and macos clients * whyp: Fix extractor * youtube: Add visionos player client * yo

    yt-dlpOperating systems
    • Update to 2026.08.19-bp160.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. openSUSE-SU-2026:21163-1

    Not ratedFix available

    Security update for yt-dlp

    This update for yt-dlp fixes the following issues: Changes in yt-dlp: - Update to version 2026.06.09 * Fixed [CVE-2026-50019]: File Downloader cookie leak with curl * Fixed [CVE-2026-50023]: Dangerous file type creation via insufficient filename sanitization * Fixed [CVE-2026-50574]: Arbitrary code execution via manifest downloads with aria2c * Added lockfile and pinned extras * Removed url, desktop and webloc from safe extensions * Extract supplemental codecs from DASH manifests * abematv: Extract subtitles * ard: Support new ardsounds domain * monstercat: Support older URLs * pornhub: Support browser impersonat

    yt-dlpOperating systems
    • Update to 2026.06.09-bp160.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →