Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:yt-Dlp_project:yt-Dlp:*:*:*:*:*:*:*:*

2 briefs RSS
medium advisory

Varnish HTTP Cache Denial of Service Vulnerability

A vulnerability in Varnish HTTP Cache allows a remote, unauthenticated attacker to trigger a denial of service condition, potentially causing service instability or resource exhaustion.

Varnish HTTP Cache vulnerability dos webserver
1c
high advisory

yt-dlp Shortcut Command Injection Vulnerability

A high-severity command injection vulnerability, CVE-2026-55404, in yt-dlp versions prior to 2026.7.4 allows remote attackers to achieve arbitrary code execution by crafting malicious metadata that is improperly sanitized when generating Windows `.url` or Linux `.desktop` shortcut files, leading to remote executable execution or shell command injection upon user interaction.

yt-dlp command-injection rce client-side vulnerability code-execution
1r 3t 1c