Homebrew Formulae: icloudpd

icloudpd

Install command:

brew install icloudpd

Tool to download photos from iCloud

License: MIT

Formula code: icloudpd.rb on GitHub

Bottle (binary package) installation support provided for:

Current versions:

stable	✅	1.32.3
head	⚡️	HEAD

Depends on:

certifi	2026.7.22	Mozilla CA bundle for Python
python@3.14	3.14.7	Interpreted, interactive, object-oriented programming language

Depends on when building from source:

4.10

GNU implementation of the famous stream editor

Known vulnerabilities in the current version:

GHSA-9hjg-9r4m-mvj7 (medium)	Requests vulnerable to .netrc credentials leak via malicious URLs
GHSA-pq67-6m6q-mj2v (medium)	urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
GHSA-gm62-xv2j-4w53	urllib3 allows an unbounded number of links in the decompression chain
GHSA-2xpw-w6gg-jr37	urllib3 streaming API improperly handles highly compressed data
GHSA-38jv-5279-wg99 (high)	Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
GHSA-87hc-h4r5-73f7 (medium)	Werkzeug safe_join() allows Windows special device names with compound extensions
GHSA-58pv-8j8x-9vj2 (high)	jaraco.context Has a Path Traversal Vulnerability
GHSA-gc5v-m9x4-r6x2 (medium)	Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
GHSA-29vq-49wr-vm6x	Werkzeug safe_join() allows Windows special device names
GHSA-68rp-wp8r-4726	Flask session does not add `Vary: Cookie` header when accessed in some ways
GHSA-qccp-gfcp-xxvc (medium)	urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
GHSA-65pc-fj4g-8rjx (medium)	Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() ...
PYSEC-2026-2132 (high)

Data from Homebrew/advisory-database. Run brew vulns icloudpd for a live check.

Analytics: