Vendor
The youtube-downloader package contains an SSRF vulnerability in the stream function of public/stream.php allowing remote attackers to perform unauthorized outbound requests.