143 matches found
tg-autoposter (2.4.2) potentially affected by CVE-2026-44353 via streamlink (3.2.0)
streamlink PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.2 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
tg-autoposter (2.4.3) potentially affected by CVE-2026-44353 via streamlink (4.0.0)
streamlink PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.3 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
tg-autoposter (2.4.4) potentially affected by CVE-2026-44353 via streamlink (4.0.1)
streamlink PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.4 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
gridplayer (0.3.0), tg-autoposter (>=3.0.0, <=3.1.0) potentially affected by CVE-2026-44353 via streamlink (4.1.0)
streamlink PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.3.0 - tg-autoposter =3.0.0, =3.1.0 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
gridplayer (>=0.4.0, <=0.4.3), tg-autoposter (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-44353 via streamlink (4.2.0)
streamlink PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.4.0, =3.1.1, =3.1.2 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
tg-autoposter (>=3.2.0, <=3.4.0b2) potentially affected by CVE-2026-44353 via streamlink (4.3.0)
streamlink PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter =3.2.0, =3.4.0b2 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
tg-autoposter (3.4.0) potentially affected by CVE-2026-44353 via streamlink (5.1.2)
streamlink PYPI version 5.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 3.4.0 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
gridplayer (>=0.5.0, <=0.5.1), holodex-cli (0.1.5) potentially affected by CVE-2026-44353 via streamlink (5.5.1)
streamlink PYPI version 5.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.5.0, =0.5.1 - holodex-cli 0.1.5 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
gridplayer (0.5.2) potentially affected by CVE-2026-44353 via streamlink (6.1.0)
streamlink PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.2 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
gridplayer (0.5.3) potentially affected by CVE-2026-44353 via streamlink (6.2.1)
streamlink PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.3 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
twitch-fapi-backend (0.1.0) potentially affected by CVE-2026-44353 via streamlink (6.5.1)
streamlink PYPI version 6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - twitch-fapi-backend 0.1.0 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
twitchrealtimehandler (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-44353 via streamlink (6.11.0)
streamlink PYPI version 6.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - twitchrealtimehandler =0.1.0, =0.1.2 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
bsky2llm (0.1.0) potentially affected by CVE-2026-44353 via streamlink (7.2.0)
streamlink PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - bsky2llm 0.1.0 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
downitall-android (1.5.0), downitall-windows (1.5.0) potentially affected by CVE-2026-44353 via streamlink (7.5.0)
streamlink PYPI version 7.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
pyautosrt (>=0.1.14, <=0.1.18), pybonsai (>=3.0.0, <=3.1.0) potentially affected by CVE-2026-44353 via streamlink (7.6.0)
streamlink PYPI version 7.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - pyautosrt =0.1.14, =3.0.0, =3.1.0 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
gridplayer (0.5.4) potentially affected by CVE-2026-44353 via streamlink (8.0.0)
streamlink PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.4 Source cves: CVE-2026-44353 Source advisory: GHSA-HGQW-6M45-HW5F...
gridplayer (0.5.4) potentially affected by CVE-2026-44353 via streamlink (8.0.0)
streamlink PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.4 Source cves: CVE-2026-44353 Source advisory: OSV:GHSA-HGQW-6M45-HW5F...
gridplayer (0.5.4) potentially affected by CVE-2026-44353 via streamlink (8.0.0)
streamlink PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.4 Source cves: CVE-2026-44353 Source advisory: SNYK:PYTHON-STREAMLINK-16726232...
Streamlink has an arbitrary local file read via file:// URI in HLS and DASH
Summary Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries and other resources. A remote .m3u8 HLS playlist or .mpd DASH manifest can list file:///path/to/file as a segment, and streamlink will read that local file and write its contents to the output stream...
GHSA-HGQW-6M45-HW5F Streamlink has an arbitrary local file read via file:// URI in HLS and DASH
Summary Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries and other resources. A remote .m3u8 HLS playlist or .mpd DASH manifest can list file:///path/to/file as a segment, and streamlink will read that local file and write its contents to the output stream...