{"action":"Upgrade yt-dlp to 2023.7.06 or later.","affected":[{"fixed":"2023.7.06","introduced":"0"}],"component":"yt-dlp","cve_ids":["CVE-2023-35934"],"ecosystem":"PyPI","epss":0.01047,"exploited":false,"fixed_versions":["2023.7.06"],"ghsa_id":"GHSA-v8mc-9377-rwjj","id":"tcs_01M5KGX9G92B7D59XCQB2F9W0V","modified_at":"2026-07-07T17:47:57.108151716Z","published_at":"2026-07-07T11:45:20.265308Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2067","https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj","https://nvd.nist.gov/vuln/detail/CVE-2023-35934","https://github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729","https://github.com/yt-dlp/yt-dlp/commit/3121512228487c9c690d3d39bfd2579addf96e07","https://github.com/yt-dlp/yt-dlp/commit/f8b4bcc0a791274223723488bfbfc23ea3276641","https://github.com/yt-dlp/yt-dlp","https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2023.07.06.185519","https://github.com/yt-dlp/yt-dlp/releases/tag/2023.07.06","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5X6YT6AQE5FHM5VTQLKKJXSYBLLJF26W","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HEOKCGVONGHR2SYUIXU33A4MKXZBDP6L","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IM44RJL2MR2WG3ZY354C5IUEEZUJGEVA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M7E7CQ5S5KMZHAMCNU7V7KYNBVCPLBHG","https://pypi.org/project/yt-dlp","https://github.com/advisories/GHSA-v8mc-9377-rwjj"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-2067","url":"https://osv.dev/vulnerability/PYSEC-2026-2067"}],"summary":"yt-dlp File Downloader cookie leak"}