CVE-2023-35934
2 advisories.
PyPI/yt-dlp CVE-2023-35934: medium 6.1, EPSS 1.05%
yt-dlp File Downloader cookie leak
Action: Upgrade yt-dlp to 2023.7.06 or later.
pip install yt-dlp==2023.7.06Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2023.7.06 | - |
Fixed versions
| 2023.7.06 |
Sources
- osv: GHSA-v8mc-9377-rwjj
- https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj
- https://nvd.nist.gov/vuln/detail/CVE-2023-35934
- https://github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729
- https://github.com/yt-dlp/yt-dlp/commit/3121512228487c9c690d3d39bfd2579addf96e07
- https://github.com/yt-dlp/yt-dlp/commit/f8b4bcc0a791274223723488bfbfc23ea3276641
- https://github.com/yt-dlp/yt-dlp
- https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2023.07.06.185519
- https://github.com/yt-dlp/yt-dlp/releases/tag/2023.07.06
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5X6YT6AQE5FHM5VTQLKKJXSYBLLJF26W
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HEOKCGVONGHR2SYUIXU33A4MKXZBDP6L
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IM44RJL2MR2WG3ZY354C5IUEEZUJGEVA
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M7E7CQ5S5KMZHAMCNU7V7KYNBVCPLBHG
CVE-2023-35934 · published · modified · JSON
PyPI/yt-dlp CVE-2023-35934: medium 6.1, EPSS 1.05%
yt-dlp File Downloader cookie leak
Action: Upgrade yt-dlp to 2023.7.06 or later.
pip install yt-dlp==2023.7.06Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2023.7.06 | - |
Fixed versions
| 2023.7.06 |
Sources
- osv: PYSEC-2026-2067
- https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj
- https://nvd.nist.gov/vuln/detail/CVE-2023-35934
- https://github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729
- https://github.com/yt-dlp/yt-dlp/commit/3121512228487c9c690d3d39bfd2579addf96e07
- https://github.com/yt-dlp/yt-dlp/commit/f8b4bcc0a791274223723488bfbfc23ea3276641
- https://github.com/yt-dlp/yt-dlp
- https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2023.07.06.185519
- https://github.com/yt-dlp/yt-dlp/releases/tag/2023.07.06
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5X6YT6AQE5FHM5VTQLKKJXSYBLLJF26W
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HEOKCGVONGHR2SYUIXU33A4MKXZBDP6L
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IM44RJL2MR2WG3ZY354C5IUEEZUJGEVA
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M7E7CQ5S5KMZHAMCNU7V7KYNBVCPLBHG
- https://pypi.org/project/yt-dlp
- https://github.com/advisories/GHSA-v8mc-9377-rwjj
CVE-2023-35934 · published · modified · JSON