downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

iluvatar (0.0.1), open-autotools (0.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.8.6)

yt-dlp PYPI version 2024.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - iluvatar 0.0.1 - open-autotools 0.0.1 - philbot-voice 2.16.0 - playlist2podcast =1.1.0, =2024.9.6.post3, =2024.9.30 Source cves: CVE-2026-55404...

feed2fedi (3.2.2), playlist2podcast (2.2.1) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.5.22)

yt-dlp PYPI version 2025.5.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.2 - playlist2podcast 2.2.1 - polytext =0.1.3b1, =0.1.0, =2025.5.23, =2025.6.1.post1 Source cves: CVE-2026-55404 Source advisory:...

feed2fedi (>=3.2.0, <=3.2.1), music-bot-py (1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.4.30)

yt-dlp PYPI version 2025.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.0, =0.10.4, =2025.5.1, =2025.5.5 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

feed2fedi (>=3.2.0, <=3.2.1), music-bot-py (1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.4.30)

yt-dlp PYPI version 2025.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.0, =0.10.4, =2025.5.1, =2025.5.5 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

deezer-downloader (2.0.0), kisskh-downloader (>=0.1.2, <=0.1.3a0) +12 more potentially affected by CVE-2026-55404 via yt-dlp (2022.11.11)

yt-dlp PYPI version 2022.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - deezer-downloader 2.0.0 - kisskh-downloader =0.1.2, =0.4.0, =0.14.0, =4.0.0rc1, =1.0.5, =2022.12.4, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.5 -...

batata-lib (>=0.1.7, <=0.1.8), feed2fedi (>=3.3.2, <=3.4.0) +9 more potentially affected by CVE-2026-55404 via yt-dlp (2025.11.12)

yt-dlp PYPI version 2025.11.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - batata-lib =0.1.7, =3.3.2, =0.1.0, =0.1.0, =2.2.16, =0.2.9, =0.1.5, =2025.11.13, =2025.12.6 Source cves: CVE-2026-55404 Source advisory:...

iluvatar (0.0.1), open-autotools (0.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.8.6)

yt-dlp PYPI version 2024.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - iluvatar 0.0.1 - open-autotools 0.0.1 - philbot-voice 2.16.0 - playlist2podcast =1.1.0, =2024.9.6.post3, =2024.9.30 Source cves: CVE-2026-55404...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

iluvatar (0.0.1), open-autotools (0.0.1) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.8.6)

yt-dlp PYPI version 2024.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - iluvatar 0.0.1 - open-autotools 0.0.1 - philbot-voice 2.16.0 - playlist2podcast =1.1.0, =2024.9.6.post3, =2024.9.30 Source cves: CVE-2026-50023...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-50023 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-500...

feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

dl-a2t (0.0.2.2), fudstop-imps (>=0.0.1, <=0.0.2) +7 more potentially affected by CVE-2026-50574 via yt-dlp (2025.2.19)

yt-dlp PYPI version 2025.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - dl-a2t 0.0.2.2 - fudstop-imps =0.0.1, =1.2.0, =0.1.1a2, =0.1.0, =2025.2.20, =2025.3.21 Source cves: CVE-2026-50574 Source advisory:...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

feed2fedi (3.2.2), playlist2podcast (2.2.1) +7 more potentially affected by CVE-2026-50574 via yt-dlp (2025.5.22)

yt-dlp PYPI version 2025.5.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.2 - playlist2podcast 2.2.1 - polytext =0.1.3b1, =0.1.0, =2025.5.23, =2025.6.1.post1 Source cves: CVE-2026-50574 Source advisory:...