YT

yt-dlp Web UI

Web GUI for yt-dlp

Media Servers Archived ★ 2.6k stars Medium setup MPL-2.0

This project is archived. Upstream development has stopped, so expect no new features or security fixes. Consider an actively maintained media servers alternative.

A terrible web ui and RPC server for yt-dlp. Designed to be self-hosted.

Strengths

  • Released under the MPL-2.0 license
  • First-class Docker support for quick deployment
  • Active community (2.6k GitHub stars)
  • Written in Go

Is yt-dlp Web UI secure?

3 known vulnerabilities affect yt-dlp Web UI's latest release (v4.0.0) according to OSV.dev; the most severe is rated high.

Affecting v4.0.0

AdvisorySeveritySummary
CVE-2026-109967Highyt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats
CVE-2026-109966Mediumyt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Method
CVE-2026-93371Mediummarcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

Source: OSV.dev, checked 2026-10-14. How this is measured.

Health badge

Maintain yt-dlp Web UI? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 15 · archived

Markdown
[![SelfHostIndex health score for yt-dlp Web UI](https://selfhostindex.com/badge/yt-dlp-web-ui.svg)](https://selfhostindex.com/app/yt-dlp-web-ui/)
HTML
<a href="https://selfhostindex.com/app/yt-dlp-web-ui/"><img src="https://selfhostindex.com/badge/yt-dlp-web-ui.svg" alt="SelfHostIndex health score for yt-dlp Web UI"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/yt-dlp-web-ui.svg
   :alt: SelfHostIndex health score for yt-dlp Web UI
   :target: https://selfhostindex.com/app/yt-dlp-web-ui/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar media servers apps