Tag
An unauthenticated remote attacker can crash the yt-dlp-web-ui application through version 4.0.0 by triggering a NULL pointer dereference via the Service.Formats JSON-RPC method.