Debian/yt-dlp: critical 9.6

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as .desktop, .url, .webl

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2026-50023
• https://security-tracker.debian.org/tracker/CVE-2026-50023

published 2026-06-23T17:17:03Z · modified 2026-10-01T03:03:16.506357046Z · JSON