Vendors / yt-dlp Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 7
Exploited now yt-dlp records in CISA KEV No yt-dlp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06827 · Published 2024-04-10 · No fix listed CWE-77
Priority HIGH 76
yt-dlp is a command-line audio/video downloader.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00665 · Published 2026-06-23 · Fixed in 2026.06.09, 2026.6.9 CWE-641
Priority HIGH 70
yt-dlp is a feature-rich command-line audio/video downloader.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.0065 · Published 2025-07-22 · Fixed in 2025.07.21 CWE-78
Priority HIGH 69
`yt-dlp` and `youtube-dl` are command-line audio/video downloaders.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00325 · Published 2024-07-02 · Fixed in 2024.07.01, 2024-07-03 CWE-669
Priority MEDIUM 45
yt-dlp is a youtube-dl fork with additional features and fixes.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0143 · Published 2024-04-09 · Fixed in 2024.04.09 CWE-78
Priority MEDIUM 44
yt-dlp is a command-line audio/video downloader.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0182 · Published 2026-02-24 · Fixed in 2026.02.21 CWE-78
Priority MEDIUM 43
yt-dlp is a command-line audio/video downloader.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00465 · Published 2026-06-23 · Fixed in 2026.06.09, 2026.6.9 CWE-74
Priority MEDIUM 41
yt-dlp and youtube-dl are command-line audio/video downloaders.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0064 · Published 2026-07-08 · Fixed in 2026.7.4 CWE-74
Priority MEDIUM 41
yt-dlp is a youtube-dl fork with additional features and fixes.
CVSS 3.1 HIGH 8.4· Network · No auth · User interaction · EPSS 0.0134 · Published 2023-09-25 · Fixed in 2023.09.24 CWE-78
Priority LOW 38
yt-dlp is a command-line program to download videos from video sites.
CVSS 3.1 HIGH 8.2· Network · No auth · User interaction · EPSS 0.01047 · Published 2023-07-06 · Fixed in 2023.7.06 CWE-200
Priority LOW 32
yt-dlp is a command-line audio/video downloader.
CVSS 3.1 HIGH 7.4· Network · No auth · User interaction · EPSS 0.00319 · Published 2026-06-23 · Fixed in 2026.06.09, 2026.6.9 CWE-200
Priority LOW 23
yt-dlp is a youtube-dl fork with additional features and fixes.
CVSS 3.1 MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00321 · Published 2023-11-14 · Fixed in 2023.11.14 CWE-444
Open these records in search → All records by CVSS severity
4 7 1 0 0
THREATIST.IORead the docs