{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2015.01.25","last_affected":"2021.12.17"}],"component":"youtube-dl","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-22fp-mf44-f2mq","id":"tcs_01M5KERFJ78XFSK11TQVAH7ZEK","modified_at":"2026-02-04T02:44:06.010018Z","published_at":"2025-04-18T20:24:07Z","references":["https://osv.dev/vulnerability/GHSA-22fp-mf44-f2mq","https://github.com/dirkf/youtube-dl/security/advisories/GHSA-22fp-mf44-f2mq","https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j","https://nvd.nist.gov/vuln/detail/CVE-2024-38519","https://github.com/ytdl-org/youtube-dl/pull/32830","https://github.com/ytdl-org/youtube-dl/commit/d42a222ed541b96649396ef00e19552aef0f09ec","https://github.com/dirkf/youtube-dl","https://securitylab.github.com/advisories/GHSL-2024-089_youtube-dl"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-22fp-mf44-f2mq","url":"https://osv.dev/vulnerability/GHSA-22fp-mf44-f2mq"}],"summary":"youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization"}