CVE-2026-6219Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of the file src/compressor.js of the component Compressor Feature. This manipulation causes command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew178d
Disclosure
CVE-2026-6219 A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of the file src/compressor.js of the component Comp… https://www.cve.org/CVERecord?id=CVE-2026-6219
Post summary
A new vulnerability (CVE-2026-6219) was identified in aandrew-me ytDownloader up to version 3.20.2, affecting the child_process.exec function in src/compressor.js, with no PoC, patch, or exploitation details disclosed.
00000112
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds178d
Disclosure
CVE-2026-6219 Command Injection in andrew-me ytDownloader Up to 3.20.2 Compressor Feature https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6219
Post summary
The entry announces a command injection vulnerability (CVE‑2026‑6219) affecting andrew‑me ytDownloader up to version 3.20.2, providing a brief technical description but no PoC, exploit, or patch information.
0000027
4.0K followersView on X

Explore more

Back to dashboard