buzz-captions (1.1.0), hyfi-ml (0.2.0) +4 more potentially affected by CVE-2025-14929 via transformers (4.39.1)

transformers PYPI version 4.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - buzz-captions 1.1.0 - hyfi-ml 0.2.0 - integral-deid =0.1.0, =4.0.0rc6, =0.0.1, =2.2.8, =2.4.5 Source cves: CVE-2025-14929 Source...

amusing-app (>=0.2.0, <=0.4.2), buzz-captions (>=1.0.0, <=1.1.0) +10 more potentially affected by CVE-2024-38519 via yt-dlp (>=2024.3.10, <=2024.5.27)

yt-dlp PYPI version =2024.3.10, =0.2.0, =1.0.0, =1.3.5, =0.6.22, =0.2.0, =0.0.5, =0.0.1, =0.1.50, =0.8.0, =2024.3.19, =2024.6.6 Source cves: CVE-2024-38519 Source advisory: GHSA-79W7-VH3H-8G4J...

aishell (>=2023.3.3, <=2023.4.11), anicli-api (>=0.3.0, <=0.3.8) +45 more potentially affected by CVE-2024-38519 via yt-dlp (2023.12.30)

yt-dlp PYPI version 2023.12.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - aishell =2023.3.3, =0.3.0, =1.4.0, =0.1.0, =1.0.2, =2.0.0a1, =2.3.10, =0.2.0, =0.4.1, =0.1.4, =0.0.1, =0.1.0, =0.1.1, =1.2.1 and more Source...