bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-73622 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-73622 Source advisory: OSV:GHSA-94P4-4CQ8-9G67...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +770 more potentially affected by CVE-2026-73622 via gitpython (>=3.0.0, <=3.1.54)

gitpython PYPI version =3.0.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-73622 Source advisory: OSV:GHSA-94P4-4CQ8-9G67...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-73622 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...

airflow-indexima (>=1.0.1, <=2.2.1), arcli (>=0.1.0, <=0.1.1) +69 more potentially affected by CVE-2026-73622 via gitpython (2.1.15)

gitpython PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - airflow-indexima =1.0.1, =0.1.0, =0.3.0rc1, =0.1.0, =0.7.0, =0.2.0, =0.11.0, =0.1.0, =0.6.0, =0.3.0, =2.0.0, =2019.2.3rc0, =2021.7.0 and more...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59224 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59224 Source advisory: OSV:GHSA-J657-M4C4-24JQ...

tubefeed (>=1.0.0, <=1.0.3), yt-dlp-transcript (0.1.19) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.12.13)

yt-dlp PYPI version 2024.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed =1.0.0, =1.0.3 - yt-dlp-transcript 0.1.19 - ytdl-sub 2024.12.14 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-55404 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-55404 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

basketcase (>=1.0.2, <=1.0.4), gharbala (>=0.1.3, <=0.1.9) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2021.12.27)

yt-dlp PYPI version 2021.12.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.2, =0.1.3, =0.4.0, =0.9.1, =1.0.3 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

dl-a2t (0.0.2.2), fudstop-imps (>=0.0.1, <=0.0.2) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.2.19)

yt-dlp PYPI version 2025.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - dl-a2t 0.0.2.2 - fudstop-imps =0.0.1, =1.2.0, =0.1.1a2, =0.1.0, =2025.2.20, =2025.3.21 Source cves: CVE-2026-55404 Source advisory:...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

scdlbot (0.15.0), vk-url-scraper (0.3.15) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.2.17)

yt-dlp PYPI version 2023.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - scdlbot 0.15.0 - vk-url-scraper 0.3.15 - ytb-downloader 0.3.1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

tk3u8 (>=0.3.2.dev19, <=0.4.0), tubefeed (2.1.5) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.25)

yt-dlp PYPI version 2025.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tk3u8 =0.3.2.dev19, =0.4.0 - tubefeed 2.1.5 - ytdl-sub 2025.6.27 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

takt (1.0.0) potentially affected by CVE-2026-55404 via yt-dlp (2023.3.3)

yt-dlp PYPI version 2023.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - takt 1.0.0 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

ytdl-sub (2024.7.2.post1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.1)

yt-dlp PYPI version 2024.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub 2024.7.2.post1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

auto-archiver (>=1.1.5, <=1.2.0), boosty-downloader (>=1.0.0, <=3.0.0) +37 more potentially affected by CVE-2026-55404 via yt-dlp (2025.12.8)

yt-dlp PYPI version 2025.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - auto-archiver =1.1.5, =1.0.0, =0.1.16, =3.4.1, =1.7.10.9, =0.3.0a1, =0.3.3, =2.0.0, =1.6.0, =1.1.0, =0.1.0, =2.2.18, =2026.1.19 and more Source...

nostr-dvm (>=0.9.10, <=1.1.2), yt-queue (0.11.5) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.11.4)

yt-dlp PYPI version 2024.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nostr-dvm =0.9.10, =2024.11.5, =2024.11.26 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

yark (>=1.2.11, <=1.2.12), yt-dlp-transcript (0.1.18) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.10.7)

yt-dlp PYPI version 2024.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yark =1.2.11, =1.2.12 - yt-dlp-transcript 0.1.18 - yt-text-extractor 0.1.0 - ytdl-sub 2024.10.9 Source cves: CVE-2026-55404 Source advisory:...

mamkit (0.1.2), tubefeed (2.0.8) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.27)

yt-dlp PYPI version 2025.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - mamkit 0.1.2 - tubefeed 2.0.8 - ytdl-sub 2025.3.31 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

tubefeed (2.0.7), whisply (0.10.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.26)

yt-dlp PYPI version 2025.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.7 - whisply 0.10.3 - ytdl-sub 2025.3.26 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...