music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-55404 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

nts-everdrone (1.3.1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.7)

yt-dlp PYPI version 2024.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone 1.3.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

ytdl-sub (>=2023.6.22, <=2023.6.30.post1) potentially affected by CVE-2026-55404 via yt-dlp (2023.6.22)

yt-dlp PYPI version 2023.6.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub =2023.6.22, =2023.6.30.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

dl-a2t (0.0.2.2), fudstop-imps (>=0.0.1, <=0.0.2) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.2.19)

yt-dlp PYPI version 2025.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - dl-a2t 0.0.2.2 - fudstop-imps =0.0.1, =1.2.0, =0.1.1a2, =0.1.0, =2025.2.20, =2025.3.21 Source cves: CVE-2026-55404 Source advisory:...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-55404 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

auto-archiver (>=1.1.5, <=1.2.0), boosty-downloader (>=1.0.0, <=3.0.0) +37 more potentially affected by CVE-2026-55404 via yt-dlp (2025.12.8)

yt-dlp PYPI version 2025.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - auto-archiver =1.1.5, =1.0.0, =0.1.16, =3.4.1, =1.7.10.9, =0.3.0a1, =0.3.3, =2.0.0, =1.6.0, =1.1.0, =0.1.0, =2.2.18, =2026.1.19 and more Source...

ddownloader (>=0.4.3, <=0.4.4) potentially affected by CVE-2026-55404 via yt-dlp (2025.12.31.233056.dev0)

yt-dlp PYPI version 2025.12.31.233056.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ddownloader =0.4.3, =0.4.4 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.12, <=3.3.1), lingq (>=1.0.4, <=1.1.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.10.22)

yt-dlp PYPI version 2025.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.12, =1.0.4, =0.4.30, =2.2.14, =2025.10.23, =2025.11.9 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

dubbed-video-downloader (0.2.0), ear2finger (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-55404 via yt-dlp (>=2026.1.29, <=2026.6.9)

yt-dlp PYPI version =2026.1.29, =1.0.0, =3.4.3, =0.1.0, =0.1.0a1, =1.0.0, =2026.1.31, =1.6.0, =0.1.2, =1.0.0, =2.1.3 - shiradl 1.8.5 - smx-youtube-app 0.1.0 - songbirdcli 0.3.1 and more Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

pytube-tool (0.1.2) potentially affected by CVE-2026-55404 via yt-dlp (2024.11.18)

yt-dlp PYPI version 2024.11.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - pytube-tool 0.1.2 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (2.1.8), yt-queue (0.11.14) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.11)

yt-dlp PYPI version 2025.8.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.8 - yt-queue 0.11.14 - ytdl-sub =2025.8.15.post2, =2025.8.20 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

batata-lib (>=0.1.7, <=0.1.8), feed2fedi (>=3.3.2, <=3.4.0) +9 more potentially affected by CVE-2026-55404 via yt-dlp (2025.11.12)

yt-dlp PYPI version 2025.11.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - batata-lib =0.1.7, =3.3.2, =0.1.0, =0.1.0, =2.2.16, =0.2.9, =0.1.5, =2025.11.13, =2025.12.6 Source cves: CVE-2026-55404 Source advisory:...

yt-queue (>=0.10.4, <=0.11.1) potentially affected by CVE-2026-55404 via yt-dlp (2024.8.1)

yt-dlp PYPI version 2024.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue =0.10.4, =0.11.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

basketcase (>=1.0.5, <=2.0.0) potentially affected by CVE-2026-55404 via yt-dlp (2022.2.4)

yt-dlp PYPI version 2022.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.5, =2.0.0 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

deezer-downloader (2.0.0), kisskh-downloader (>=0.1.2, <=0.1.3a0) +12 more potentially affected by CVE-2026-55404 via yt-dlp (2022.11.11)

yt-dlp PYPI version 2022.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - deezer-downloader 2.0.0 - kisskh-downloader =0.1.2, =0.4.0, =0.14.0, =4.0.0rc1, =1.0.5, =2022.12.4, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.5 -...

songbirdcli (0.2.7), songbirdcore (0.1.2) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.21)

yt-dlp PYPI version 2025.3.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - songbirdcli 0.2.7 - songbirdcore 0.1.2 - tubefeed 2.0.5 - ytdebunk =1.0.1, =1.1.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-36...

vk-url-scraper (>=0.2.1, <=0.3.5) potentially affected by CVE-2026-55404 via yt-dlp (2022.5.18)

yt-dlp PYPI version 2022.5.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper =0.2.1, =0.3.5 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

ytdl-sub (>=2023.6.22, <=2023.6.30.post1) potentially affected by CVE-2026-55404 via yt-dlp (2023.6.22)

yt-dlp PYPI version 2023.6.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub =2023.6.22, =2023.6.30.post1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

ytdl-sub (2024.7.2.post1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.1)

yt-dlp PYPI version 2024.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub 2024.7.2.post1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...