tk3u8 (>=0.3.2.dev19, <=0.4.0), tubefeed (2.1.5) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.25)

yt-dlp PYPI version 2025.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tk3u8 =0.3.2.dev19, =0.4.0 - tubefeed 2.1.5 - ytdl-sub 2025.6.27 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...