Download Latest Version
v6.1.0 source code.zip (278.9 kB)
Get an email when there's a new version of gdown
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-04-12 | 506 Bytes | |
| v5.2.2 source code.tar.gz | 2026-04-12 | 284.1 kB | |
| v5.2.2 source code.zip | 2026-04-12 | 291.5 kB | |
| Totals: 3 Items | 576.1 kB | 0 | |
Security
- Fix path traversal vulnerability in extractall() that allowed zip/tar archives with ../ entries to write files outside the target directory (GHSA-76hw-p97h-883f)
- Reject symlinks, hardlinks, and special files in tar archives
- Use Python 3.12+ filter="data" for safe tar extraction when available
- Sanitize filenames from HTTP responses and URLs to prevent path traversal via /, \, .., and null bytes
- Sanitize root folder name in download_folder() before building directory paths
