Vulnerabilities (CVE)

Filtered by vendor Ytdl-sync Project Subscribe
Filtered by product Ytdl-sync
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31536 1 Ytdl-sync Project 1 Ytdl-sync 2024-02-28 6.4 MEDIUM 9.3 CRITICAL
The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.