feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (3.1.1), lingq (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.10.22)

yt-dlp PYPI version 2024.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.1.1 - lingq =1.0.0, =2024.10.23, =2024.10.31 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (3.2.2), playlist2podcast (2.2.1) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.5.22)

yt-dlp PYPI version 2025.5.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.2 - playlist2podcast 2.2.1 - polytext =0.1.3b1, =0.1.0, =2025.5.23, =2025.6.1.post1 Source cves: CVE-2026-55404 Source advisory:...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

feed2fedi (>=3.2.0, <=3.2.1), music-bot-py (1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.4.30)

yt-dlp PYPI version 2025.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.0, =0.10.4, =2025.5.1, =2025.5.5 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

batata-lib (>=0.1.7, <=0.1.8), feed2fedi (>=3.3.2, <=3.4.0) +9 more potentially affected by CVE-2026-55404 via yt-dlp (2025.11.12)

yt-dlp PYPI version 2025.11.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - batata-lib =0.1.7, =3.3.2, =0.1.0, =0.1.0, =2.2.16, =0.2.9, =0.1.5, =2025.11.13, =2025.12.6 Source cves: CVE-2026-55404 Source advisory:...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

feed2fedi (>=3.2.0, <=3.2.1), music-bot-py (1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.4.30)

yt-dlp PYPI version 2025.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.0, =0.10.4, =2025.5.1, =2025.5.5 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

feed2fedi (3.1.1), lingq (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.10.22)

yt-dlp PYPI version 2024.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.1.1 - lingq =1.0.0, =2024.10.23, =2024.10.31 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

feed2fedi (3.2.2), playlist2podcast (2.2.1) +7 more potentially affected by CVE-2026-50023 via yt-dlp (2025.5.22)

yt-dlp PYPI version 2025.5.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.2 - playlist2podcast 2.2.1 - polytext =0.1.3b1, =0.1.0, =2025.5.23, =2025.6.1.post1 Source cves: CVE-2026-50023 Source advisory:...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-50574 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-505...

feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...