Threats tagged 'brew-scdl-cve-2026-26331'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 1.8%	CVE-2026-26331yt-dlp · Arbitrary Command Injection when using the `--netrc-cmd` option High8.8EPSS 1.8%2026-08-13GCVE DatabaseCVE-2026-26331 yt-dlp versions >=3.0.0 <3.0.4 contain a high-severity vulnerability (CVE-2026-26331) involving arbitrary command injection via the `--netrc-cmd` option or `netrc_cmd` Python API parameter. This occurs when a maliciously crafted URL is processed, allowing shell command injection due to unsafe handling of the netrc "machine" value in certain extractors. The vulnerability is fixed in version 3.0.4. EPSS 1.8%Vulnerability #brew-scdl-cve-2026-26331 #homebrew	GCVE Database	2026-08-13

Page 1 of 1