ytptube

v2.5.4 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Automation & Workflows

✓ No known CVEs patched

This release patches 1 known CVE

Topics

concurrency downloader self-hosted youtube yt-dlp ytptube

Summary

AI summary

Updates Commits since v2.5.3, refactor, and feat across a mixed release.

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds system diagnostics endpoint. Adds system diagnostics endpoint. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Makes log level runtime configurable. Makes log level runtime configurable. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Adds YTP_DISABLE_EXEC environment variable to strip dangerous yt‑dlp options. Adds YTP_DISABLE_EXEC environment variable to strip dangerous yt‑dlp options. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Fixes startup crash when access log is disabled. Fixes startup crash when access log is disabled. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

feat: add system diagnostics endpoint. by @arabcoders in https://github.com/arabcoders/ytptube/pull/608
feat: make log level runtime configurable by @arabcoders in https://github.com/arabcoders/ytptube/pull/609
Refactor: minor improvements to the WebUI by @arabcoders in https://github.com/arabcoders/ytptube/pull/610

Full Changelog: https://github.com/arabcoders/ytptube/compare/v2.5.3...v2.5.4

64fdcac refactor: implement re-extraction logic and process-safe handling for non-picklable objects.
376e439 docs: add info about youtube rss feeds
434d3e9 feat: add system diagnostics endpoint.
cf90db3 refactor: update log mesages to take advantage of JSONL
39ed3d0 refactor: add more context to the actual log message.
1267dba refactor: use single logger namespace
fa8ba1a feat: make log level runtime managable.
ab56a7d fix: startup crash if access long was turned off
9259119 docs: document security recommendations
10c18ff refactor: minor UI update for diagnostics page
c70b3a4 chore: update dependancies
50dd2d3 docs: screenshots updates
0482df2 chore: update external packages
e61df14 refactor: improve how cards look
acca33a rerfactor: add page transition toggle
2efc09d refactor: improve log details view
4319be3 fix: disable file logging during tests
473e45c refactor: use list with filtering for preset menus
7a3c41b refactor: update other uselect to use uselectmenu
4881fab feat: add YTP_DISABLE_EXEC to strip dangerous yt-dlp options
d6318fc refactor: fix loading older logs

YTP_DISABLE_EXEC flag strips dangerous yt-dlp options, hardening execution safety

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track ytptube

Get notified when new releases ship.

About ytptube

A WebUI for yt-dlp with concurrent downloads support, presets and scheduled tasks and many more.

v2.5.6 Breaking change introduced by yt-dlp upgrade from 2026.03.17 to 2026.06.09