takt (1.0.0) potentially affected by CVE-2026-50574 via yt-dlp (2023.3.3)

yt-dlp PYPI version 2023.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - takt 1.0.0 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

ytdl-sub (2024.7.2.post1) potentially affected by CVE-2026-50574 via yt-dlp (2024.7.1)

yt-dlp PYPI version 2024.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub 2024.7.2.post1 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

tubefeed (3.0.0), yt-queue (0.11.16) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2025.9.5)

yt-dlp PYPI version 2025.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.0 - yt-queue 0.11.16 - ytdl-sub =2025.9.9, =2025.9.13 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

yt-queue (>=0.10.4, <=0.11.1) potentially affected by CVE-2026-50574 via yt-dlp (2024.8.1)

yt-dlp PYPI version 2024.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue =0.10.4, =0.11.1 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

auto-archiver (>=1.1.5, <=1.2.0), boosty-downloader (>=1.0.0, <=3.0.0) +37 more potentially affected by CVE-2026-50574 via yt-dlp (2025.12.8)

yt-dlp PYPI version 2025.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - auto-archiver =1.1.5, =1.0.0, =0.1.16, =3.4.1, =1.7.10.9, =0.3.0a1, =0.3.3, =2.0.0, =1.6.0, =1.1.0, =0.1.0, =2.2.18, =2026.1.19 and more Source...

basketcase (3.0.2), gridplayer (0.4.3) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2022.7.18)

yt-dlp PYPI version 2022.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.2 - gridplayer 0.4.3 - vk-url-scraper =0.3.8, =0.3.10 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

batata-lib (>=0.1.7, <=0.1.8), feed2fedi (>=3.3.2, <=3.4.0) +9 more potentially affected by CVE-2026-50574 via yt-dlp (2025.11.12)

yt-dlp PYPI version 2025.11.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - batata-lib =0.1.7, =3.3.2, =0.1.0, =0.1.0, =2.2.16, =0.2.9, =0.1.5, =2025.11.13, =2025.12.6 Source cves: CVE-2026-50574 Source advisory:...

feed2fedi (>=3.2.12, <=3.3.1), lingq (>=1.0.4, <=1.1.0) +7 more potentially affected by CVE-2026-50574 via yt-dlp (2025.10.22)

yt-dlp PYPI version 2025.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.12, =1.0.4, =0.4.30, =2.2.14, =2025.10.23, =2025.11.9 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

songbird-py (>=0.1.1, <=0.1.5) potentially affected by CVE-2026-50023 via yt-dlp (2021.12.1)

yt-dlp PYPI version 2021.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - songbird-py =0.1.1, =0.1.5 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

tubefeed (3.0.0), yt-queue (0.11.16) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2025.9.5)

yt-dlp PYPI version 2025.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.0 - yt-queue 0.11.16 - ytdl-sub =2025.9.9, =2025.9.13 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

scdlbot (0.15.0), vk-url-scraper (0.3.15) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2023.2.17)

yt-dlp PYPI version 2023.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - scdlbot 0.15.0 - vk-url-scraper 0.3.15 - ytb-downloader 0.3.1 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

ethos-cli (0.1.0), flowsets (0.0.9) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2025.1.26)

yt-dlp PYPI version 2025.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ethos-cli 0.1.0 - flowsets 0.0.9 - rvc-cli =1.1.0, =0.11.8, =2025.1.28, =2025.2.17 Source cves: CVE-2026-50023 Source advisory:...

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

tubefeed (2.0.6), ytdl-sub (2025.3.25) potentially affected by CVE-2026-50023 via yt-dlp (2025.3.25)

yt-dlp PYPI version 2025.3.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.6 - ytdl-sub 2025.3.25 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

tubefeed (3.0.3), yt-queue (>=0.11.20, <=0.12.0) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2025.10.14)

yt-dlp PYPI version 2025.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.3 - yt-queue =0.11.20, =2025.10.15, =2025.10.16 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

mamkit (0.1.2), tubefeed (2.0.8) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2025.3.27)

yt-dlp PYPI version 2025.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - mamkit 0.1.2 - tubefeed 2.0.8 - ytdl-sub 2025.3.31 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +19 more potentially affected by CVE-2026-53753 via crawl4ai (>=0.3.731, <=0.8.5)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.7.5b6 and more Source cves: CVE-2026-53753 Source advisory: GHSA-QXJP-W3PJ-48M7...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +343 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33, <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: MEND:CVE-2026-48776...

datatran (1.5.0), log-serialize (2.1.1) potentially affected by unknown CVE via proto-bin (2.5.3)

proto-bin NPM version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on proto-bin and may be impacted: - datatran 1.5.0 - log-serialize 2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-5921...