marcopiovanello yt-dlp-web-ui

• CVE-2026-109967 High 7.5 yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats 0.6%
• CVE-2026-109966 Medium 5.3 yt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Method 0.4%
• CVE-2026-93371 High 8.3 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection 1.4%