CVE-2024-38519
2 advisories.
PyPI/yt-dlp CVE-2024-38519: high 7.8, EPSS 0.33%
yt-dlp File system modification and RCE through improper file-extension sanitization
Action: Upgrade yt-dlp to 2024.07.01 or later.
pip install yt-dlp==2024.07.01Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2024.07.01 | - |
Fixed versions
| 2024.07.01 |
Sources
- osv: GHSA-79w7-vh3h-8g4j
- https://github.com/dirkf/youtube-dl/security/advisories/GHSA-22fp-mf44-f2mq
- https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j
- https://nvd.nist.gov/vuln/detail/CVE-2024-38519
- https://github.com/ytdl-org/youtube-dl/pull/32830
- https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9c30c8c31f58330090ced03a
- https://github.com/ytdl-org/youtube-dl/commit/d42a222ed541b96649396ef00e19552aef0f09ec
- https://github.com/yt-dlp/yt-dlp
- https://github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01
- https://securitylab.github.com/advisories/GHSL-2024-089_youtube-dl
- https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp
CVE-2024-38519 · published · modified · JSON
PyPI/yt-dlp CVE-2024-38519: high 7.8, EPSS 0.33%
yt-dlp File system modification and RCE through improper file-extension sanitization
Action: Upgrade yt-dlp to 2024.07.01 or later.
pip install yt-dlp==2024.07.01Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2024.07.01 | - |
Fixed versions
| 2024.07.01 |
Sources
- osv: PYSEC-2026-2065
- https://github.com/dirkf/youtube-dl/security/advisories/GHSA-22fp-mf44-f2mq
- https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j
- https://nvd.nist.gov/vuln/detail/CVE-2024-38519
- https://github.com/ytdl-org/youtube-dl/pull/32830
- https://github.com/yt-dlp/yt-dlp/commit/5ce582448ececb8d9c30c8c31f58330090ced03a
- https://github.com/ytdl-org/youtube-dl/commit/d42a222ed541b96649396ef00e19552aef0f09ec
- https://github.com/yt-dlp/yt-dlp
- https://github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01
- https://securitylab.github.com/advisories/GHSL-2024-089_youtube-dl
- https://securitylab.github.com/advisories/GHSL-2024-090_yt-dlp
- https://pypi.org/project/yt-dlp
- https://github.com/advisories/GHSA-79w7-vh3h-8g4j
CVE-2024-38519 · published · modified · JSON