CVE-2026-50574 - yt-dlp: Arbitrary code execution via manifest downloads with aria2c
CVE ID :CVE-2026-50574 Published : June 23, 2026, 4:09 p.m. | 5 hours, 1 minute ago Description :yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt-dlp passes...