dl-a2t (0.0.2.2), fudstop-imps (>=0.0.1, <=0.0.2) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.2.19)

yt-dlp PYPI version 2025.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - dl-a2t 0.0.2.2 - fudstop-imps =0.0.1, =1.2.0, =0.1.1a2, =0.1.0, =2025.2.20, =2025.3.21 Source cves: CVE-2026-55404 Source advisory:...

tubefeed (2.0.7), whisply (0.10.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.26)

yt-dlp PYPI version 2025.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.7 - whisply 0.10.3 - ytdl-sub 2025.3.26 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

broken-source (0.9.0.dev1), daa-music (>=0.0.2, <=0.0.5) +9 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.31)

yt-dlp PYPI version 2025.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - broken-source 0.9.0.dev1 - daa-music =0.0.2, =0.0.2.3, =2.0.9, =2025.4.2, =2025.4.18 Source cves: CVE-2026-55404 Source advisory:...

tk3u8 (>=0.3.2.dev19, <=0.4.0), tubefeed (2.1.5) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.25)

yt-dlp PYPI version 2025.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tk3u8 =0.3.2.dev19, =0.4.0 - tubefeed 2.1.5 - ytdl-sub 2025.6.27 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

tubefeed (2.1.10), ytdl-sub (>=2025.8.27.post3, <=2025.8.29) potentially affected by CVE-2026-55404 via yt-dlp (2025.8.22)

yt-dlp PYPI version 2025.8.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.10 - ytdl-sub =2025.8.27.post3, =2025.8.29 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (3.0.3), yt-queue (>=0.11.20, <=0.12.0) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.10.14)

yt-dlp PYPI version 2025.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.3 - yt-queue =0.11.20, =2025.10.15, =2025.10.16 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.12, <=3.3.1), lingq (>=1.0.4, <=1.1.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.10.22)

yt-dlp PYPI version 2025.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.12, =1.0.4, =0.4.30, =2.2.14, =2025.10.23, =2025.11.9 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

batata-lib (>=0.1.7, <=0.1.8), feed2fedi (>=3.3.2, <=3.4.0) +9 more potentially affected by CVE-2026-55404 via yt-dlp (2025.11.12)

yt-dlp PYPI version 2025.11.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - batata-lib =0.1.7, =3.3.2, =0.1.0, =0.1.0, =2.2.16, =0.2.9, =0.1.5, =2025.11.13, =2025.12.6 Source cves: CVE-2026-55404 Source advisory:...

auto-archiver (>=1.1.5, <=1.2.0), boosty-downloader (>=1.0.0, <=3.0.0) +37 more potentially affected by CVE-2026-55404 via yt-dlp (2025.12.8)

yt-dlp PYPI version 2025.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - auto-archiver =1.1.5, =1.0.0, =0.1.16, =3.4.1, =1.7.10.9, =0.3.0a1, =0.3.3, =2.0.0, =1.6.0, =1.1.0, =0.1.0, =2.2.18, =2026.1.19 and more Source...

dubbed-video-downloader (0.2.0), ear2finger (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-55404 via yt-dlp (>=2026.1.29, <=2026.6.9)

yt-dlp PYPI version =2026.1.29, =1.0.0, =3.4.3, =0.1.0, =0.1.0a1, =1.0.0, =2026.1.31, =1.6.0, =0.1.2, =1.0.0, =2.1.3 - shiradl 1.8.5 - smx-youtube-app 0.1.0 - songbirdcli 0.3.1 and more Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

SummaryThe AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...

bestatic (>=0.0.34, <=0.0.36), mkdocs-techdocs-core (1.6.1) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.19.1)

pymdown-extensions PYPI version 10.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - bestatic =0.0.34, =0.6.42, =0.6.43 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

mkdocs-techdocs-core (>=1.5.3, <=1.5.4), mkdocs-zettelkasten (>=0.2.1, <=0.3.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.14.3)

pymdown-extensions PYPI version 10.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mkdocs-techdocs-core =1.5.3, =0.2.1, =0.3.1 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

arctic-ai (0.1.0), arkindex-base-worker (>=0.3.2rc5, <=0.3.2) potentially affected by CVE-2026-61632 via pymdown-extensions (9.9.2)

pymdown-extensions PYPI version 9.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arctic-ai 0.1.0 - arkindex-base-worker =0.3.2rc5, =0.3.2 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

adze-modeler (0.0.1), arkindex-base-worker (>=0.3.3rc1, <=0.3.3rc3) +27 more potentially affected by CVE-2026-61632 via pymdown-extensions (9.11.0)

pymdown-extensions PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - adze-modeler 0.0.1 - arkindex-base-worker =0.3.3rc1, =0.2.0, =1.1.3, =0.3.3, =0.1.1, =0.2.4, =2.3.3, =0.4.0, =0.5.0, =0.6.1...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-61632 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

mybws (0.1.1) potentially affected by CVE-2026-61632 via pymdown-extensions (10.8.0)

pymdown-extensions PYPI version 10.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - mybws 0.1.1 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...

arkindex-base-worker (>=0.3.1rc3, <=0.3.1rc4) potentially affected by CVE-2026-61632 via pymdown-extensions (9.6.0)

pymdown-extensions PYPI version 9.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.1rc3, =0.3.1rc4 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-3609...