tubefeed (2.1.10), ytdl-sub (>=2025.8.27.post3, <=2025.8.29) potentially affected by CVE-2026-55404 via yt-dlp (2025.8.22)

yt-dlp PYPI version 2025.8.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.10 - ytdl-sub =2025.8.27.post3, =2025.8.29 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (2.0.1), ytdl-sub (2025.1.15) potentially affected by CVE-2026-55404 via yt-dlp (2025.1.12)

yt-dlp PYPI version 2025.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.1 - ytdl-sub 2025.1.15 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

arbi-tr-frontend (>=0.1.0, <=0.1.1), comiccrawler (>=2024.3.25, <=2024.12.9) +33 more potentially affected by CVE-2026-55404 via yt-dlp (2024.12.23)

yt-dlp PYPI version 2024.12.23 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - arbi-tr-frontend =0.1.0, =2024.3.25, =1.2.1, =0.0.1.2, =0.3.0, =0.1.0, =0.1.0, =0.0.23, =0.1.5, =0.0.11, =0.0.39 - mseep-owl 0.0.2 and more...

yt-queue (>=0.10.4, <=0.11.1) potentially affected by CVE-2026-55404 via yt-dlp (2024.8.1)

yt-dlp PYPI version 2024.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue =0.10.4, =0.11.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

arkindex-base-worker (>=0.3.1rc3, <=0.3.1rc4) potentially affected by CVE-2026-61632 via pymdown-extensions (9.6.0)

pymdown-extensions PYPI version 9.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc3, =0.3.1rc4 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

arctic-ai (0.1.0), arkindex-base-worker (>=0.3.2rc5, <=0.3.2) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.2)

pymdown-extensions PYPI version 9.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arctic-ai 0.1.0 - arkindex-base-worker =0.3.2rc5, =0.3.2 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: OSV:PYSEC-2026-3592...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +72 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.8.2, =0.3.0, =0.6.0 and more Source cves: CVE-2026-13769 Source advisory: OSV:PYSEC-2026-3548...

mybws (0.1.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.8.0)

pymdown-extensions PYPI version 10.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mybws 0.1.1 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

bestatic (>=0.0.34, <=0.0.36), mkdocs-techdocs-core (1.6.1) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.19.1)

pymdown-extensions PYPI version 10.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - bestatic =0.0.34, =0.6.42, =0.6.43 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: OSV:PYSEC-2026-3590...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59218 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59218 Source advisory: OSV:PYSEC-2026-3594...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: OSV:PYSEC-2026-3593...

mkdocs-techdocs-core (>=1.5.3, <=1.5.4), mkdocs-zettelkasten (>=0.2.1, <=0.3.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.3)

pymdown-extensions PYPI version 10.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =1.5.3, =0.2.1, =0.3.1 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

adze-modeler (0.0.1), arkindex-base-worker (>=0.3.3rc1, <=0.3.3rc3) +27 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.11.0)

pymdown-extensions PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adze-modeler 0.0.1 - arkindex-base-worker =0.3.3rc1, =0.2.0, =1.1.3, =0.3.3, =0.1.1, =0.2.4, =2.3.3, =0.4.0, =0.5.0, =0.6.1...

agatta (>=1.0.0, <=1.0.2), agentbuddy (0.1.1.dev33) +102 more potentially affected by CVE-2026-59936 via pypdf (3.17.4)

pypdf PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agatta =1.0.0, =0.0.3, =0.0.1, =1.1.0, =0.0.2, =1.2.0, =0.6.7, =1.2.1, =0.1.3, =0.0.1, =0.8.2 - cadenai 0.1.0 and more Source cves: CVE-2026-59936...

mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2026-59937 via pypdf (5.0.0)

pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2026-59937 Source advisory: OSV:PYSEC-2026-3610...

cipromote (>=1.5.0, <=1.5.2) potentially affected by CVE-2026-52902 via awxkit (23.9.0)

awxkit PYPI version 23.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on awxkit and may be impacted: - cipromote =1.5.0, =1.5.2 Source cves: CVE-2026-52902 Source advisory: OSV:PYSEC-2026-3550...

cocpyth (>=0.1.1, <=0.1.2), pretix (>=4.19.0, <=4.20.4) potentially affected by CVE-2026-59936 via pypdf (3.8.1)

pypdf PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cocpyth =0.1.1, =4.19.0, =4.20.4 Source cves: CVE-2026-59936 Source advisory: OSV:PYSEC-2026-3612...