nts-everdrone (1.3.1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.7)

yt-dlp PYPI version 2024.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone 1.3.1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

auto-archiver (>=1.1.5, <=1.2.0), boosty-downloader (>=1.0.0, <=3.0.0) +37 more potentially affected by CVE-2026-55404 via yt-dlp (2025.12.8)

yt-dlp PYPI version 2025.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - auto-archiver =1.1.5, =1.0.0, =0.1.16, =3.4.1, =1.7.10.9, =0.3.0a1, =0.3.3, =2.0.0, =1.6.0, =1.1.0, =0.1.0, =2.2.18, =2026.1.19 and more Source...

takt (1.0.0) potentially affected by CVE-2026-55404 via yt-dlp (2023.3.3)

yt-dlp PYPI version 2023.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - takt 1.0.0 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

nostr-dvm (>=0.9.10, <=1.1.2), yt-queue (0.11.5) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.11.4)

yt-dlp PYPI version 2024.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nostr-dvm =0.9.10, =2024.11.5, =2024.11.26 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

basketcase (>=1.0.2, <=1.0.4), gharbala (>=0.1.3, <=0.1.9) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2021.12.27)

yt-dlp PYPI version 2021.12.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.2, =0.1.3, =0.4.0, =0.9.1, =1.0.3 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

scdlbot (0.15.0), vk-url-scraper (0.3.15) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.2.17)

yt-dlp PYPI version 2023.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - scdlbot 0.15.0 - vk-url-scraper 0.3.15 - ytb-downloader 0.3.1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: OSV:GHSA-73X5-H92W-XC2J...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: GHSA-73X5-H92W-XC2J...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: OSV:GHSA-7R7X-GJVR-448G...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: SNYK:PYTHON-OPENWEBUI-18307439...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: OSV:GHSA-74H3-CXQ7-VC5Q...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: SNYK:PYTHON-OPENWEBUI-18307442...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: GHSA-74H3-CXQ7-VC5Q...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59218 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59218 Source advisory: OSV:GHSA-7RW5-9F7Q-XJ36...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: SNYK:PYTHON-OPENWEBUI-18307453...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: OSV:GHSA-4R2P-27MH-5M22...

apus-cli (0.0.21), asaas-cdk-constructs (0.1.0) +182 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.240.0)

aws-cdk-lib PYPI version =2.0.0, =0.0.1, =0.0.3, =2.6.4, =2.82.0a0, =0.0.0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.91.0a0, =2.73.0a0, =2.73.0a0, =2.95.1a0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-AWSCDKLIB-18318519...

acru-l (>=0.0.0, <=1.0.0a6), airflow-cdk (>=0.0.1, <=0.6.0) +97 more potentially affected by unknown CVE via aws-cdk-aws-codebuild (>=1.75.0, <=1.204.0)

aws-cdk-aws-codebuild PYPI version =1.75.0, =0.0.0, =0.0.1, =0.1.0, =0.0.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.204.0 - aws-ci-cd-fargate 7.3.0 - aws-ci-cd-lambda 3.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-464C-974J-9XM6...