tg-autoposter (2.4.4) potentially affected by CVE-2026-92164 via streamlink (4.0.1)

streamlink PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.4 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (0.3.0), tg-autoposter (>=3.0.0, <=3.1.0) potentially affected by CVE-2026-92164 via streamlink (4.1.0)

streamlink PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.3.0 - tg-autoposter =3.0.0, =3.1.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (>=0.4.0, <=0.4.3), tg-autoposter (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-92164 via streamlink (4.2.0)

streamlink PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.4.0, =3.1.1, =3.1.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

tg-autoposter (>=3.2.0, <=3.4.0b2) potentially affected by CVE-2026-92164 via streamlink (4.3.0)

streamlink PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter =3.2.0, =3.4.0b2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

tg-autoposter (3.4.0) potentially affected by CVE-2026-92164 via streamlink (5.1.2)

streamlink PYPI version 5.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 3.4.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (>=0.5.0, <=0.5.1), holodex-cli (0.1.5) potentially affected by CVE-2026-92164 via streamlink (5.5.1)

streamlink PYPI version 5.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.5.0, =0.5.1 - holodex-cli 0.1.5 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (0.5.2) potentially affected by CVE-2026-92164 via streamlink (6.1.0)

streamlink PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (0.5.3) potentially affected by CVE-2026-92164 via streamlink (6.2.1)

streamlink PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer 0.5.3 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

twitch-fapi-backend (0.1.0) potentially affected by CVE-2026-92164 via streamlink (6.5.1)

streamlink PYPI version 6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - twitch-fapi-backend 0.1.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

twitchrealtimehandler (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-92164 via streamlink (6.11.0)

streamlink PYPI version 6.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - twitchrealtimehandler =0.1.0, =0.1.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

bsky2llm (0.1.0) potentially affected by CVE-2026-92164 via streamlink (7.2.0)

streamlink PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - bsky2llm 0.1.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

downitall-android (1.5.0), downitall-windows (1.5.0) potentially affected by CVE-2026-92164 via streamlink (7.5.0)

streamlink PYPI version 7.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

pyautosrt (>=0.1.14, <=0.1.18), pybonsai (>=3.0.0, <=3.1.0) potentially affected by CVE-2026-92164 via streamlink (7.6.0)

streamlink PYPI version 7.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - pyautosrt =0.1.14, =3.0.0, =3.1.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (0.5.4), twitch-play (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-92164 via streamlink (>=8.0.0, <=8.4.0)

streamlink PYPI version =8.0.0, =0.2.2, =0.2.3 Source cves: CVE-2026-92164 Source advisory: GHSA-VF2X-4V53-PM7V...

gridplayer (0.5.4), twitch-play (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-92164 via streamlink (>=8.0.0, <=8.4.0)

streamlink PYPI version =8.0.0, =0.2.2, =0.2.3 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

GHSA-VF2X-4V53-PM7V Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

Summary HTTPSession mounts a FileAdapter for the file:// scheme and inherits redirect handling unchanged from requests.Session. requests does not check for scheme downgrades or cross-protocol transitions when it follows a redirect, so any https request Streamlink makes can be redirected by the...

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

Summary HTTPSession mounts a FileAdapter for the file:// scheme and inherits redirect handling unchanged from requests.Session. requests does not check for scheme downgrades or cross-protocol transitions when it follows a redirect, so any https request Streamlink makes can be redirected by the...

DEBIAN-CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...