{"api_version":"v1","generated_at":"2026-10-09T18:45:00+00:00","product":{"cve_count":11,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-yt-dlp-yt-dlp-79de92f18291","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"yt-dlp","next_cursor":null,"observations":[{"affected":"< 2026.7.4","affected_versions_present":true,"cve_id":"CVE-2026-55404","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55404","fixed":"2026.7.4.","last_modified":"2026-07-09T14:41:17.681Z","patch_url":"https://github.com/yt-dlp/yt-dlp/commit/b6590aaa1e3808155d69c9a79a797ae484163789","primary_source":"","published":"2026-07-08T19:36:48.792Z"},{"affected":">= 2023.09.24, < 2026.06.09","affected_versions_present":true,"cve_id":"CVE-2026-50019","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50019","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-06-23T17:57:20.992Z","patch_url":"https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-f7j3-774f-rfhj","primary_source":"","published":"2026-06-23T16:13:26.676Z"},{"affected":"< 2026.06.09","affected_versions_present":true,"cve_id":"CVE-2026-50574","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50574","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-06-25T03:55:47.470Z","patch_url":"https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-vx4q-3cr2-7cg2","primary_source":"","published":"2026-06-23T16:09:18.086Z"},{"affected":"< 2026.06.09","affected_versions_present":true,"cve_id":"CVE-2026-50023","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50023","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-06-25T13:45:44.576Z","patch_url":"https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-c6mh-fpjc-4pr3","primary_source":"","published":"2026-06-23T16:08:43.003Z"},{"affected":">= 2023.06.21, < 2026.02.21","affected_versions_present":true,"cve_id":"CVE-2026-26331","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26331","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-24T20:08:47.720Z","patch_url":"https://github.com/yt-dlp/yt-dlp/commit/1fbbe29b99dc61375bf6d786f824d9fcf6ea9c1a","primary_source":"","published":"2026-02-24T02:23:40.858Z"},{"affected":"< 2025.07.21","affected_versions_present":true,"cve_id":"CVE-2025-54072","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54072","fixed":"2025.07.21.","last_modified":"2025-07-23T18:30:06.761Z","patch_url":"https://github.com/yt-dlp/yt-dlp/commit/959ac99e98c3215437e573c22d64be42d361e863","primary_source":"","published":"2025-07-22T21:34:43.408Z"},{"affected":"< 2024.07.01 < 2024.07.01; >= 2015.01.25 \u2264 2021.12.17; nightly < 2024-07-03","affected_versions_present":true,"cve_id":"CVE-2024-38519","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-38519","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T04:12:25.618Z","patch_url":"","primary_source":"","published":"2024-07-02T13:47:36.399Z"},{"affected":">= 2021.04.11, < 2024.04.09","affected_versions_present":true,"cve_id":"CVE-2024-22423","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-22423","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:33:45.700Z","patch_url":"https://github.com/yt-dlp/yt-dlp/commit/de015e930747165dbb8fcd360f8775fd973b7d6e","primary_source":"","published":"2024-04-09T17:22:58.751Z"},{"affected":">= 2022.10.04, < 2023.11.14","affected_versions_present":true,"cve_id":"CVE-2023-46121","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-46121","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-29T15:19:23.948Z","patch_url":"https://github.com/yt-dlp/yt-dlp/commit/f04b5bedad7b281bee9814686bba1762bae092eb","primary_source":"","published":"2023-11-14T23:31:55.145Z"},{"affected":">= 2021.04.11, < 2023.09.24; < nightly 2023.09.24.003044","affected_versions_present":true,"cve_id":"CVE-2023-40581","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-40581","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-24T14:48:55.952Z","patch_url":"https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-42h4-v29r-42qg","primary_source":"","published":"2023-09-25T18:54:00.204Z"},{"affected":"yt-dlp < 2023.07.06; yt-dlp < nightly 2023.07.06.185519","affected_versions_present":true,"cve_id":"CVE-2023-35934","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-35934","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:55:56.266Z","patch_url":"https://github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729","primary_source":"","published":"2023-07-06T19:39:49.656Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"yt-dlp"}}