metube

v2026.06.20 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Media Servers

✓ No known CVEs patched

This release patches 1 known CVE

Topics

self-hosted youtube youtube-dl yt-dlp

Affected surfaces

auth

Summary

AI summary

Fixed open download vulnerability for cookie files.

Full changelog

Docker images have been built and pushed:

Docker Hub:

GitHub Container Registry:

fix open download of cookie files (ce897ee) — prevents unauthorized access to sensitive authentication data

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track metube

Get notified when new releases ship.

About metube

Self-hosted video downloader for YouTube and other sites (web UI for youtube-dl / yt-dlp)