basketcase (>=0.0.4, <=1.0.0) potentially affected by CVE-2026-50574 via yt-dlp (2021.9.2)

yt-dlp PYPI version 2021.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =0.0.4, =1.0.0 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

songbird-py (>=0.1.1, <=0.1.5) potentially affected by CVE-2026-50574 via yt-dlp (2021.12.1)

yt-dlp PYPI version 2021.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - songbird-py =0.1.1, =0.1.5 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

takt (1.0.0) potentially affected by CVE-2026-50574 via yt-dlp (2023.3.3)

yt-dlp PYPI version 2023.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - takt 1.0.0 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

batata-lib (>=0.1.7, <=0.1.8), feed2fedi (>=3.3.2, <=3.4.0) +9 more potentially affected by CVE-2026-50574 via yt-dlp (2025.11.12)

yt-dlp PYPI version 2025.11.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - batata-lib =0.1.7, =3.3.2, =0.1.0, =0.1.0, =2.2.16, =0.2.9, =0.1.5, =2025.11.13, =2025.12.6 Source cves: CVE-2026-50574 Source advisory:...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-50574 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

broken-source (0.9.0.dev1), daa-music (>=0.0.2, <=0.0.5) +9 more potentially affected by CVE-2026-50574 via yt-dlp (2025.3.31)

yt-dlp PYPI version 2025.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - broken-source 0.9.0.dev1 - daa-music =0.0.2, =0.0.2.3, =2.0.9, =2025.4.2, =2025.4.18 Source cves: CVE-2026-50574 Source advisory:...

ricecooker (>=0.7.0b4, <=0.7.1) potentially affected by CVE-2026-50574 via yt-dlp (2022.3.8.1)

yt-dlp PYPI version 2022.3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ricecooker =0.7.0b4, =0.7.1 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

ytdl-sub (2024.12.8) potentially affected by CVE-2026-50574 via yt-dlp (2024.12.6)

yt-dlp PYPI version 2024.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub 2024.12.8 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

Fedora 44 : yt-dlp (2026-bb702c613b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bb702c613b advisory. - Update to 2026.06.09. Fixes rhbz2487407. - Mitigates CVE-2026-50019, CVE-2026-50023, CVE-2026-50574 Tenable has extracted the preceding descriptio...

SUSE CVE-2026-50574

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On...

scdlbot (0.15.0), vk-url-scraper (0.3.15) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2023.2.17)

yt-dlp PYPI version 2023.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - scdlbot 0.15.0 - vk-url-scraper 0.3.15 - ytb-downloader 0.3.1 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

basketcase (>=1.0.5, <=2.0.0) potentially affected by CVE-2026-50574 via yt-dlp (2022.2.4)

yt-dlp PYPI version 2022.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.5, =2.0.0 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

tubefeed (2.1.8), yt-queue (0.11.14) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2025.8.11)

yt-dlp PYPI version 2025.8.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.8 - yt-queue 0.11.14 - ytdl-sub =2025.8.15.post2, =2025.8.20 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

ytdl-sub (2024.12.8) potentially affected by CVE-2026-50574 via yt-dlp (2024.12.6)

yt-dlp PYPI version 2024.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub 2024.12.8 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

broken-source (0.9.0.dev1), daa-music (>=0.0.2, <=0.0.5) +9 more potentially affected by CVE-2026-50574 via yt-dlp (2025.3.31)

yt-dlp PYPI version 2025.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - broken-source 0.9.0.dev1 - daa-music =0.0.2, =0.0.2.3, =2.0.9, =2025.4.2, =2025.4.18 Source cves: CVE-2026-50574 Source advisory:...

nts-everdrone (1.3.1) potentially affected by CVE-2026-50574 via yt-dlp (2024.7.7)

yt-dlp PYPI version 2024.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone 1.3.1 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

ethos-cli (0.1.0), flowsets (0.0.9) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2025.1.26)

yt-dlp PYPI version 2025.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ethos-cli 0.1.0 - flowsets 0.0.9 - rvc-cli =1.1.0, =0.11.8, =2025.1.28, =2025.2.17 Source cves: CVE-2026-50574 Source advisory:...

gridplayer (>=0.4.0, <=0.4.2) potentially affected by CVE-2026-50574 via yt-dlp (2022.6.29)

yt-dlp PYPI version 2022.6.29 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gridplayer =0.4.0, =0.4.2 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

dl-a2t (0.0.2.2), fudstop-imps (>=0.0.1, <=0.0.2) +7 more potentially affected by CVE-2026-50574 via yt-dlp (2025.2.19)

yt-dlp PYPI version 2025.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - dl-a2t 0.0.2.2 - fudstop-imps =0.0.1, =1.2.0, =0.1.1a2, =0.1.0, =2025.2.20, =2025.3.21 Source cves: CVE-2026-50574 Source advisory:...

ear2finger (>=1.0.0, <=1.0.1), feed2fedi (>=3.4.3, <=3.7.6) +19 more potentially affected by CVE-2026-50574 via yt-dlp (>=2026.1.29, <=2026.3.17)

yt-dlp PYPI version =2026.1.29, =1.0.0, =3.4.3, =0.1.0, =0.1.0a1, =1.0.0, =2026.1.31, =1.6.0, =0.1.2, =1.0.0, =0.1.0, =1.0.2 and more Source cves: CVE-2026-50574 Source advisory: GHSA-VX4Q-3CR2-7CG2...