tubefeed (>=1.0.0, <=1.0.3), yt-dlp-transcript (0.1.19) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.12.13)

yt-dlp PYPI version 2024.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed =1.0.0, =1.0.3 - yt-dlp-transcript 0.1.19 - ytdl-sub 2024.12.14 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

tubefeed (2.0.7), whisply (0.10.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.26)

yt-dlp PYPI version 2025.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.7 - whisply 0.10.3 - ytdl-sub 2025.3.26 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

yark (>=1.2.11, <=1.2.12), yt-dlp-transcript (0.1.18) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.10.7)

yt-dlp PYPI version 2024.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yark =1.2.11, =1.2.12 - yt-dlp-transcript 0.1.18 - yt-text-extractor 0.1.0 - ytdl-sub 2024.10.9 Source cves: CVE-2026-55404 Source advisory:...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

nostr-dvm (>=0.9.10, <=1.1.2), yt-queue (0.11.5) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.11.4)

yt-dlp PYPI version 2024.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nostr-dvm =0.9.10, =2024.11.5, =2024.11.26 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

tk3u8 (>=0.3.2.dev19, <=0.4.0), tubefeed (2.1.5) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.25)

yt-dlp PYPI version 2025.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tk3u8 =0.3.2.dev19, =0.4.0 - tubefeed 2.1.5 - ytdl-sub 2025.6.27 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: OSV:GHSA-73X5-H92W-XC2J...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: GHSA-73X5-H92W-XC2J...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: OSV:GHSA-7R7X-GJVR-448G...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: SNYK:PYTHON-OPENWEBUI-18307439...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: SNYK:PYTHON-OPENWEBUI-18307442...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: OSV:GHSA-74H3-CXQ7-VC5Q...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: GHSA-74H3-CXQ7-VC5Q...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59218 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59218 Source advisory: OSV:GHSA-7RW5-9F7Q-XJ36...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: OSV:GHSA-4R2P-27MH-5M22...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: SNYK:PYTHON-OPENWEBUI-18307453...

apus-cli (0.0.21), asaas-cdk-constructs (0.1.0) +182 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.240.0)

aws-cdk-lib PYPI version =2.0.0, =0.0.1, =0.0.3, =2.6.4, =2.82.0a0, =0.0.0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.91.0a0, =2.73.0a0, =2.73.0a0, =2.95.1a0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-AWSCDKLIB-18318519...

apus-cli (0.0.21), asaas-cdk-constructs (0.1.0) +182 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.240.0)

aws-cdk-lib PYPI version =2.0.0, =0.0.1, =0.0.3, =2.6.4, =2.82.0a0, =0.0.0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.91.0a0, =2.73.0a0, =2.73.0a0, =2.95.1a0 and more Source cves: unknown CVE Source advisory: GHSA-464C-974J-9XM6...

acru-l (>=0.0.0, <=1.0.0a6), airflow-cdk (>=0.0.1, <=0.6.0) +97 more potentially affected by unknown CVE via aws-cdk-aws-codebuild (>=1.75.0, <=1.204.0)

aws-cdk-aws-codebuild PYPI version =1.75.0, =0.0.0, =0.0.1, =0.1.0, =0.0.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.204.0 - aws-ci-cd-fargate 7.3.0 - aws-ci-cd-lambda 3.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-464C-974J-9XM6...

git-semver (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-42215 +1 more via gitpython (2.0.9)

gitpython PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - git-semver =0.1.2, =0.1.5 Source cves: CVE-2026-42215, CVE-2026-73625 Source advisory: OSV:GHSA-R9MR-M37C-5FR3...