broken-source (0.9.0.dev1), daa-music (>=0.0.2, <=0.0.5) +9 more potentially affected by CVE-2026-50023 via yt-dlp (2025.3.31)

yt-dlp PYPI version 2025.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - broken-source 0.9.0.dev1 - daa-music =0.0.2, =0.0.2.3, =2.0.9, =2025.4.2, =2025.4.18 Source cves: CVE-2026-50023 Source advisory:...

tubefeed (2.1.9), yt-queue (0.11.15) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2025.8.20)

yt-dlp PYPI version 2025.8.20 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.9 - yt-queue 0.11.15 - ytdl-sub =2025.8.21, =2025.8.27 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

feed2fedi (>=3.2.12, <=3.3.1), lingq (>=1.0.4, <=1.1.0) +7 more potentially affected by CVE-2026-50574 via yt-dlp (2025.10.22)

yt-dlp PYPI version 2025.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.12, =1.0.4, =0.4.30, =2.2.14, =2025.10.23, =2025.11.9 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

songbird-py (>=0.1.1, <=0.1.5) potentially affected by CVE-2026-50023 via yt-dlp (2021.12.1)

yt-dlp PYPI version 2021.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - songbird-py =0.1.1, =0.1.5 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

ytdl-sub (>=2023.6.22, <=2023.6.30.post1) potentially affected by CVE-2026-50574 via yt-dlp (2023.6.22)

yt-dlp PYPI version 2023.6.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub =2023.6.22, =2023.6.30.post1 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

nostr-dvm (>=0.9.10, <=1.1.2), yt-queue (0.11.5) +2 more potentially affected by CVE-2026-50574 via yt-dlp (2024.11.4)

yt-dlp PYPI version 2024.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nostr-dvm =0.9.10, =2024.11.5, =2024.11.26 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

catsup (>=0.3.8, <=0.3.11), pylocalsmtp (>=0.5.0, <=1.0.0) +1 more potentially affected by CVE-2026-49855 via tornado (3.2.0)

tornado PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - catsup =0.3.8, =0.5.0, =0.1.1, =0.1.2 Source cves: CVE-2026-49855 Source advisory: OSV:PYSEC-2026-3389...

aiida-core (>=1.0.0, <=1.5.3), aiogremlin (>=3.3.3, <=3.3.4) +80 more potentially affected by CVE-2026-49855 via tornado (4.5.3)

tornado PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - aiida-core =1.0.0, =3.3.3, =1.1.8, =3.9.0, =0.11.0rc1, =1.0.0, =0.1.1, =0.27.1, =2.0.3, =0.15.0, =0.1.0, =0.0.0, =0.0.3 and more Source cves:...

pylocalsmtp (>=0.2.1, <=0.4.2) potentially affected by CVE-2026-49853 via tornado (3.0.1)

tornado PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - pylocalsmtp =0.2.1, =0.4.2 Source cves: CVE-2026-49853 Source advisory: OSV:PYSEC-2026-3387...

docat (1.0.0) potentially affected by CVE-2026-54530 via pypdf (4.0.0)

pypdf PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docat 1.0.0 Source cves: CVE-2026-54530 Source advisory: OSV:PYSEC-2026-3009...

docat (1.0.0) potentially affected by CVE-2026-54531 via pypdf (4.0.0)

pypdf PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docat 1.0.0 Source cves: CVE-2026-54531 Source advisory: OSV:PYSEC-2026-3022...

docrx (>=0.0.1, <=0.0.10), paperreview (0.1.0) +1 more potentially affected by CVE-2026-49461 via pypdf (3.15.0)

pypdf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docrx =0.0.1, =1.1.11, =1.1.13 Source cves: CVE-2026-49461 Source advisory: OSV:PYSEC-2026-3020...

agatta (>=0.9.1, <=0.9.4), automate3 (2023.11.7) +5 more potentially affected by CVE-2026-54531 via pypdf (3.17.0)

pypdf PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agatta =0.9.1, =1698926697.0.0, =9.2.3, =9.2.6 - uniflow 0.0.7 Source cves: CVE-2026-54531 Source advisory: OSV:PYSEC-2026-3022...

assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2026-48735 via pypdf (3.16.4)

pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2026-48735 Source advisory: OSV:PYSEC-2026-3025...

mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2026-54531 via pypdf (5.0.0)

pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2026-54531 Source advisory: OSV:PYSEC-2026-3022...

calibreweb (0.6.21), sysnet-pdffiller (>=1.1.0, <=1.2.1) potentially affected by CVE-2026-48735 via pypdf (3.15.5)

pypdf PYPI version 3.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - calibreweb 0.6.21 - sysnet-pdffiller =1.1.0, =1.2.1 Source cves: CVE-2026-48735 Source advisory: OSV:PYSEC-2026-3025...

aiagents4pharma (>=1.15.0, <=1.44.0), pypdftotext (>=0.0.6, <=0.0.9) +3 more potentially affected by CVE-2026-54530 via pypdf (5.2.0)

pypdf PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiagents4pharma =1.15.0, =0.0.6, =1.0.1, =1.0.1, =1.0.5 Source cves: CVE-2026-54530 Source advisory: OSV:PYSEC-2026-3009...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-54531 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-48735 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

render50 (9.2.2) potentially affected by CVE-2026-49461 via pypdf (3.15.3)

pypdf PYPI version 3.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - render50 9.2.2 Source cves: CVE-2026-49461 Source advisory: OSV:PYSEC-2026-3020...