Approved changes feed: RSS · Atom

cpe:2.3:a:aandrew-me:ytdownloader:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAandrew Me (cd2c7595-0a64-5625-b32e-868c91ce6746)
ProductYtdownloader (dbfa11e1-06a4-511a-b5f6-832e5ba5b21f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6219 vulnerable 2026-06-03 15:27:54.906726 aandrew-me ytDownloader Compressor Feature compressor.js child_process.exec command injection
MEDIUM (5.3)
A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of the file src/compressor.js of the component Compressor Feature. This manipulation causes command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Published: 2026-04-13T20:45:24.103Z
Updated: 2026-04-14T19:37:43.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6218 vulnerable 2026-06-03 15:27:54.906286 aandrew-me ytDownloader Error Details Panel createTextNode cross site scripting
MEDIUM (4.3)
A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the function createTextNode of the component Error Details Panel. The manipulation results in cross site scripting. The attack may be performed from remote. The vendor was contacted early about this disclosure.
Published: 2026-04-13T20:30:14.394Z
Updated: 2026-04-14T13:05:33.179Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.