amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-55404 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-queue (0.10.1), ytdl-sub (>=2024.7.4, <=2024.7.4.post1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.2)

yt-dlp PYPI version 2024.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.10.1 - ytdl-sub =2024.7.4, =2024.7.4.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

vk-url-scraper (0.3.30) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.15.232803.dev0)

yt-dlp PYPI version 2024.7.15.232803.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper 0.3.30 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-fts (>=0.1.55, <=0.1.59), yt-queue (0.10.2) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.7.16)

yt-dlp PYPI version 2024.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-fts =0.1.55, =0.1.59 - yt-queue 0.10.2 - ytdl-sub 2024.7.21 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-55404 Source advisory:...

yt-queue (>=0.10.4, <=0.11.1) potentially affected by CVE-2026-55404 via yt-dlp (2024.8.1)

yt-dlp PYPI version 2024.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue =0.10.4, =0.11.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yark (>=1.2.11, <=1.2.12), yt-dlp-transcript (0.1.18) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.10.7)

yt-dlp PYPI version 2024.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yark =1.2.11, =1.2.12 - yt-dlp-transcript 0.1.18 - yt-text-extractor 0.1.0 - ytdl-sub 2024.10.9 Source cves: CVE-2026-55404 Source advisory:...

tubefeed (>=1.0.0, <=1.0.3), yt-dlp-transcript (0.1.19) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.12.13)

yt-dlp PYPI version 2024.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed =1.0.0, =1.0.3 - yt-dlp-transcript 0.1.19 - ytdl-sub 2024.12.14 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

arbi-tr-frontend (>=0.1.0, <=0.1.1), comiccrawler (>=2024.3.25, <=2024.12.9) +33 more potentially affected by CVE-2026-55404 via yt-dlp (2024.12.23)

yt-dlp PYPI version 2024.12.23 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - arbi-tr-frontend =0.1.0, =2024.3.25, =1.2.1, =0.0.1.2, =0.3.0, =0.1.0, =0.1.0, =0.0.23, =0.1.5, =0.0.11, =0.0.39 - mseep-owl 0.0.2 and more...

tubefeed (2.0.1), ytdl-sub (2025.1.15) potentially affected by CVE-2026-55404 via yt-dlp (2025.1.12)

yt-dlp PYPI version 2025.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.1 - ytdl-sub 2025.1.15 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

dl-a2t (0.0.2.2), fudstop-imps (>=0.0.1, <=0.0.2) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.2.19)

yt-dlp PYPI version 2025.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - dl-a2t 0.0.2.2 - fudstop-imps =0.0.1, =1.2.0, =0.1.1a2, =0.1.0, =2025.2.20, =2025.3.21 Source cves: CVE-2026-55404 Source advisory:...

tubefeed (2.0.7), whisply (0.10.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.26)

yt-dlp PYPI version 2025.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.7 - whisply 0.10.3 - ytdl-sub 2025.3.26 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

broken-source (0.9.0.dev1), daa-music (>=0.0.2, <=0.0.5) +9 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.31)

yt-dlp PYPI version 2025.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - broken-source 0.9.0.dev1 - daa-music =0.0.2, =0.0.2.3, =2.0.9, =2025.4.2, =2025.4.18 Source cves: CVE-2026-55404 Source advisory:...

tk3u8 (>=0.3.2.dev19, <=0.4.0), tubefeed (2.1.5) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.25)

yt-dlp PYPI version 2025.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tk3u8 =0.3.2.dev19, =0.4.0 - tubefeed 2.1.5 - ytdl-sub 2025.6.27 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

tubefeed (2.1.10), ytdl-sub (>=2025.8.27.post3, <=2025.8.29) potentially affected by CVE-2026-55404 via yt-dlp (2025.8.22)

yt-dlp PYPI version 2025.8.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.10 - ytdl-sub =2025.8.27.post3, =2025.8.29 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (3.0.3), yt-queue (>=0.11.20, <=0.12.0) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.10.14)

yt-dlp PYPI version 2025.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.3 - yt-queue =0.11.20, =2025.10.15, =2025.10.16 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.12, <=3.3.1), lingq (>=1.0.4, <=1.1.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.10.22)

yt-dlp PYPI version 2025.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.12, =1.0.4, =0.4.30, =2.2.14, =2025.10.23, =2025.11.9 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...