{"action":"Upgrade yt-dlp to 2023.7.06 or later.","affected":[{"fixed":"2023.7.06","introduced":"0"}],"component":"yt-dlp","cve_ids":["CVE-2023-35934"],"ecosystem":"PyPI","epss":0.01047,"exploited":false,"fixed_versions":["2023.7.06"],"ghsa_id":"GHSA-v8mc-9377-rwjj","id":"tcs_01M5KFZNGZP4GK8QYZ0728AQCE","modified_at":"2026-09-10T03:49:54.694938041Z","published_at":"2023-07-06T19:47:40Z","references":["https://osv.dev/vulnerability/GHSA-v8mc-9377-rwjj","https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj","https://nvd.nist.gov/vuln/detail/CVE-2023-35934","https://github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729","https://github.com/yt-dlp/yt-dlp/commit/3121512228487c9c690d3d39bfd2579addf96e07","https://github.com/yt-dlp/yt-dlp/commit/f8b4bcc0a791274223723488bfbfc23ea3276641","https://github.com/yt-dlp/yt-dlp","https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2023.07.06.185519","https://github.com/yt-dlp/yt-dlp/releases/tag/2023.07.06","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5X6YT6AQE5FHM5VTQLKKJXSYBLLJF26W","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HEOKCGVONGHR2SYUIXU33A4MKXZBDP6L","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IM44RJL2MR2WG3ZY354C5IUEEZUJGEVA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M7E7CQ5S5KMZHAMCNU7V7KYNBVCPLBHG"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-v8mc-9377-rwjj","url":"https://osv.dev/vulnerability/GHSA-v8mc-9377-rwjj"}],"summary":"yt-dlp File Downloader cookie leak"}