music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

amusing-app (>=0.1.0, <=0.1.2), mamkit (>=0.1.0, <=1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.16)

yt-dlp PYPI version 2023.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.1.0, =0.1.0, =1.3.2, =0.0.1, =2023.11.16, =2024.1.5.post4 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-55404 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-55404 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-55404 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

amusing-app (>=0.1.0, <=0.1.2), mamkit (>=0.1.0, <=1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.16)

yt-dlp PYPI version 2023.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.1.0, =0.1.0, =1.3.2, =0.0.1, =2023.11.16, =2024.1.5.post4 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

cvexplore (>=0.2.6.0, <=0.2.6.1), meloetta (1.1.0) +4 more potentially affected by CVE-2026-59890 via setuptools (58.0.0)

setuptools PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore =0.2.6.0, =0.0.1, =0.3.1, =1.3.0, =1.6.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-50023 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-50023 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-50574 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...