feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...