aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +128 more potentially affected by CVE-2026-54654 via datamodel-code-generator (>=0.14.1, <=0.59.1)

datamodel-code-generator PYPI version =0.14.1, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.0, =0.6.0 and more Source cves: CVE-2026-54654 Source advisory: OSV:PYSEC-2026-3566...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +139 more potentially affected by CVE-2026-55391 via datamodel-code-generator (>=0.5.10, <=0.61.0)

datamodel-code-generator PYPI version =0.5.10, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-55391 Source advisory: OSV:PYSEC-2026-3565...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +137 more potentially affected by CVE-2026-54691 via datamodel-code-generator (>=0.10.3, <=0.59.1)

datamodel-code-generator PYPI version =0.10.3, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-54691 Source advisory: OSV:PYSEC-2026-3564...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +125 more potentially affected by CVE-2026-54653 via datamodel-code-generator (>=0.17.1, <=0.59.1)

datamodel-code-generator PYPI version =0.17.1, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.0, =0.6.0 and more Source cves: CVE-2026-54653 Source advisory: OSV:PYSEC-2026-3555...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +139 more potentially affected by CVE-2026-55403 via datamodel-code-generator (>=0.5.10, <=0.61.0)

datamodel-code-generator PYPI version =0.5.10, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-55403 Source advisory: OSV:PYSEC-2026-3563...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +116 more potentially affected by CVE-2026-54621 via datamodel-code-generator (>=0.25.1, <=0.59.1)

datamodel-code-generator PYPI version =0.25.1, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.0, =0.6.0 and more Source cves: CVE-2026-54621 Source advisory: OSV:PYSEC-2026-3561...

agency-swarm (>=1.9.8, <=1.9.9), aigear (>=0.0.2, <=0.2.1) +34 more potentially affected by CVE-2026-54655 via datamodel-code-generator (>=0.51.0, <=0.59.1)

datamodel-code-generator PYPI version =0.51.0, =1.9.8, =0.0.2, =1.3.5, =0.3.1, =0.9.0, =0.7.6, =0.14.2, =0.3.2, =1.2.1, =8.1.2, =0.6.0, =2.5.1, =3.1.0 and more Source cves: CVE-2026-54655 Source advisory: OSV:PYSEC-2026-3562...

auto-archiver (>=1.1.5, <=1.2.0), boosty-downloader (>=1.0.0, <=3.0.0) +37 more potentially affected by CVE-2026-55404 via yt-dlp (2025.12.8)

yt-dlp PYPI version 2025.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - auto-archiver =1.1.5, =1.0.0, =0.1.16, =3.4.1, =1.7.10.9, =0.3.0a1, =0.3.3, =2.0.0, =1.6.0, =1.1.0, =0.1.0, =2.2.18, =2026.1.19 and more Source...

music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

basketcase (1.0.1) potentially affected by CVE-2026-55404 via yt-dlp (2021.10.22)

yt-dlp PYPI version 2021.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 1.0.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

vk-url-scraper (>=0.2.1, <=0.3.5) potentially affected by CVE-2026-55404 via yt-dlp (2022.5.18)

yt-dlp PYPI version 2022.5.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper =0.2.1, =0.3.5 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-queue (0.10.1), ytdl-sub (>=2024.7.4, <=2024.7.4.post1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.2)

yt-dlp PYPI version 2024.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.10.1 - ytdl-sub =2024.7.4, =2024.7.4.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (>=1.0.0, <=1.0.3), yt-dlp-transcript (0.1.19) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.12.13)

yt-dlp PYPI version 2024.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed =1.0.0, =1.0.3 - yt-dlp-transcript 0.1.19 - ytdl-sub 2024.12.14 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-55404 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-55404 Source advisory:...

aishell (>=2023.3.3, <=2023.4.11), anicli-api (>=0.3.0, <=0.3.8) +45 more potentially affected by CVE-2026-55404 via yt-dlp (2023.12.30)

yt-dlp PYPI version 2023.12.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - aishell =2023.3.3, =0.3.0, =1.4.0, =0.1.0, =1.0.2, =2.0.0a1, =2.3.10, =0.2.0, =0.4.1, =0.1.4, =0.0.1, =0.1.0, =0.1.1, =1.2.1 and more Source...

yark (>=1.2.11, <=1.2.12), yt-dlp-transcript (0.1.18) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.10.7)

yt-dlp PYPI version 2024.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yark =1.2.11, =1.2.12 - yt-dlp-transcript 0.1.18 - yt-text-extractor 0.1.0 - ytdl-sub 2024.10.9 Source cves: CVE-2026-55404 Source advisory:...

takt (1.0.0) potentially affected by CVE-2026-55404 via yt-dlp (2023.3.3)

yt-dlp PYPI version 2023.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - takt 1.0.0 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-fts (>=0.1.55, <=0.1.59), yt-queue (0.10.2) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.7.16)

yt-dlp PYPI version 2024.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-fts =0.1.55, =0.1.59 - yt-queue 0.10.2 - ytdl-sub 2024.7.21 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...