feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...