CVE-2026-109967 - yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats
CVE ID :CVE-2026-109967 Published : Oct. 13, 2026, 2:17 p.m. | 1 hour, 14 minutes ago Description :yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the server. Attackers...