aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +136 more potentially affected by CVE-2026-54691 via datamodel-code-generator (>=0.10.3, <=0.59.1)

datamodel-code-generator PYPI version =0.10.3, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-54691 Source advisory: OSV:PYSEC-2026-3564...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +136 more potentially affected by CVE-2026-54690 via datamodel-code-generator (>=0.10.3, <=0.59.1)

datamodel-code-generator PYPI version =0.10.3, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-54690 Source advisory: OSV:PYSEC-2026-3560...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +138 more potentially affected by CVE-2026-55403 via datamodel-code-generator (>=0.5.10, <=0.61.0)

datamodel-code-generator PYPI version =0.5.10, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-55403 Source advisory: OSV:PYSEC-2026-3563...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +138 more potentially affected by CVE-2026-55391 via datamodel-code-generator (>=0.5.10, <=0.61.0)

datamodel-code-generator PYPI version =0.5.10, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-55391 Source advisory: OSV:PYSEC-2026-3565...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +115 more potentially affected by CVE-2026-54621 via datamodel-code-generator (>=0.25.1, <=0.59.1)

datamodel-code-generator PYPI version =0.25.1, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.0, =0.6.0 and more Source cves: CVE-2026-54621 Source advisory: OSV:PYSEC-2026-3561...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59223 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59223 Source advisory: OSV:PYSEC-2026-3603...

stitchlab-agentcore (>=0.1.0, <=1.0.2), strands-compose-agentcore (0.1.1) potentially affected by CVE-2026-16796 via bedrock-agentcore (>=1.1.1, <=1.7.0)

bedrock-agentcore PYPI version =1.1.1, =0.1.0, =1.0.2 - strands-compose-agentcore 0.1.1 Source cves: CVE-2026-16796 Source advisory: OSV:PYSEC-2026-3551...

basketcase (1.0.1) potentially affected by CVE-2026-55404 via yt-dlp (2021.10.22)

yt-dlp PYPI version 2021.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 1.0.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

basketcase (>=1.0.2, <=1.0.4), gharbala (>=0.1.3, <=0.1.9) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2021.12.27)

yt-dlp PYPI version 2021.12.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.2, =0.1.3, =0.4.0, =0.9.1, =1.0.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

ricecooker (>=0.7.0b4, <=0.7.1) potentially affected by CVE-2026-55404 via yt-dlp (2022.3.8.1)

yt-dlp PYPI version 2022.3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ricecooker =0.7.0b4, =0.7.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

vk-url-scraper (>=0.2.1, <=0.3.5) potentially affected by CVE-2026-55404 via yt-dlp (2022.5.18)

yt-dlp PYPI version 2022.5.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper =0.2.1, =0.3.5 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

basketcase (3.0.2), gridplayer (0.4.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2022.7.18)

yt-dlp PYPI version 2022.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.2 - gridplayer 0.4.3 - vk-url-scraper =0.3.8, =0.3.10 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

basketcase (>=3.1.0, <=3.1.1) potentially affected by CVE-2026-55404 via yt-dlp (2022.10.4)

yt-dlp PYPI version 2022.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =3.1.0, =3.1.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

scdlbot (0.15.0), vk-url-scraper (0.3.15) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.2.17)

yt-dlp PYPI version 2023.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - scdlbot 0.15.0 - vk-url-scraper 0.3.15 - ytb-downloader 0.3.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

takt (1.0.0) potentially affected by CVE-2026-55404 via yt-dlp (2023.3.3)

yt-dlp PYPI version 2023.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - takt 1.0.0 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

gpt3discord (>=11.7.1, <=12.3.8), gridplayer (>=0.5.0, <=0.5.1) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2023.3.4)

yt-dlp PYPI version 2023.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gpt3discord =11.7.1, =0.5.0, =0.9.3, =0.0.3, =0.3.0, =2023.3.7, =2023.6.17.post4 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

africanwhisper (>=0.2.9, <=0.9.0), yt-queue (>=0.3.0, <=0.7.1) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.14)

yt-dlp PYPI version 2023.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - africanwhisper =0.2.9, =0.3.0, =0.7.1 - ytdl-sub 2023.11.15 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

aishell (>=2023.3.3, <=2023.4.11), anicli-api (>=0.3.0, <=0.3.8) +45 more potentially affected by CVE-2026-55404 via yt-dlp (2023.12.30)

yt-dlp PYPI version 2023.12.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - aishell =2023.3.3, =0.3.0, =1.4.0, =0.1.0, =1.0.2, =2.0.0a1, =2.3.10, =0.2.0, =0.4.1, =0.1.4, =0.0.1, =0.1.0, =0.1.1, =1.2.1 and more Source...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-55404 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-queue (0.10.1), ytdl-sub (>=2024.7.4, <=2024.7.4.post1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.2)

yt-dlp PYPI version 2024.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.10.1 - ytdl-sub =2024.7.4, =2024.7.4.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...