rpm package
suse/yt-dlp&distro=SUSE Package Hub 15 SP5
pkg:rpm/suse/yt-dlp&distro=SUSE%20Package%20Hub%2015%20SP5
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-46121 | — | < 2023.11.14-bp155.3.3.1 | 2023.11.14-bp155.3.3.1 | Nov 14, 2023 | yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to | ||
| CVE-2023-35934 | — | < 2023.11.14-bp155.3.3.1 | 2023.11.14-bp155.3.3.1 | Jul 6, 2023 | yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent |
- CVE-2023-46121Nov 14, 2023affected < 2023.11.14-bp155.3.3.1fixed 2023.11.14-bp155.3.3.1
yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to
- CVE-2023-35934Jul 6, 2023affected < 2023.11.14-bp155.3.3.1fixed 2023.11.14-bp155.3.3.1
yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent