Astra Linux – Vulnerability in ofono

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

amusing-app (>=0.1.0, <=0.1.2), mamkit (>=0.1.0, <=1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.16)

yt-dlp PYPI version 2023.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.1.0, =0.1.0, =1.3.2, =0.0.1, =2023.11.16, =2024.1.5.post4 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-55404 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=0.3.1, <=1.2.7) potentially affected by CVE-2026-55404 via yt-dlp (2023.10.7)

yt-dlp PYPI version 2023.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =0.3.1, =1.2.7 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2026-55404 via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-55404 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

amusing-app (>=0.1.0, <=0.1.2), mamkit (>=0.1.0, <=1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.16)

yt-dlp PYPI version 2023.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.1.0, =0.1.0, =1.3.2, =0.0.1, =2023.11.16, =2024.1.5.post4 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

cvexplore (>=0.2.6.0, <=0.2.6.1), meloetta (1.1.0) +4 more potentially affected by CVE-2026-59890 via setuptools (58.0.0)

setuptools PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore =0.2.6.0, =0.0.1, =0.3.1, =1.3.0, =1.6.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2024-38519 +1 more via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2024-38519, CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

amusing-app (>=0.2.0, <=0.4.2), music-tool-kit (>=1.3.9, <=1.3.21) +6 more potentially affected by CVE-2024-38519 +1 more via yt-dlp (2024.4.9)

yt-dlp PYPI version 2024.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.2.0, =1.3.9, =0.2.0, =0.0.5, =2024.4.26.post1, =2024.5.11 Source cves: CVE-2024-38519, CVE-2026-50023 Source advisory:...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

music-tool-kit (>=1.3.22, <=1.3.24) potentially affected by CVE-2026-50574 via yt-dlp (2024.5.26)

yt-dlp PYPI version 2024.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.22, =1.3.24 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...