basketcase (>=1.0.2, <=1.0.4), gharbala (>=0.1.3, <=0.1.9) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2021.12.27)

yt-dlp PYPI version 2021.12.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.2, =0.1.3, =0.4.0, =0.9.1, =1.0.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...