feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

modusa (>=0.3.85, <=0.4.29), tubefeed (3.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.23)

yt-dlp PYPI version 2025.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - modusa =0.3.85, =0.4.29 - tubefeed 3.0.1 - youtube-colab-proxy 1.0.2 - yt-queue 0.11.17 - ytdl-sub 2025.9.24 Source cves: CVE-2026-55404 Source...

ethos-cli (0.1.0), flowsets (0.0.9) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.1.26)

yt-dlp PYPI version 2025.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ethos-cli 0.1.0 - flowsets 0.0.9 - rvc-cli =1.1.0, =0.11.8, =2025.1.28, =2025.2.17 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

tubefeed (2.0.7), whisply (0.10.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.26)

yt-dlp PYPI version 2025.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.7 - whisply 0.10.3 - ytdl-sub 2025.3.26 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

mamkit (0.1.2), tubefeed (2.0.8) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.27)

yt-dlp PYPI version 2025.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - mamkit 0.1.2 - tubefeed 2.0.8 - ytdl-sub 2025.3.31 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (3.2.2), playlist2podcast (2.2.1) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.5.22)

yt-dlp PYPI version 2025.5.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.2 - playlist2podcast 2.2.1 - polytext =0.1.3b1, =0.1.0, =2025.5.23, =2025.6.1.post1 Source cves: CVE-2026-55404 Source advisory:...

tubefeed (2.1.9), yt-queue (0.11.15) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.20)

yt-dlp PYPI version 2025.8.20 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.9 - yt-queue 0.11.15 - ytdl-sub =2025.8.21, =2025.8.27 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (2.0.1), ytdl-sub (2025.1.15) potentially affected by CVE-2026-55404 via yt-dlp (2025.1.12)

yt-dlp PYPI version 2025.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.1 - ytdl-sub 2025.1.15 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

songbirdcli (0.2.7), songbirdcore (0.1.2) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.21)

yt-dlp PYPI version 2025.3.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - songbirdcli 0.2.7 - songbirdcore 0.1.2 - tubefeed 2.0.5 - ytdebunk =1.0.1, =1.1.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-36...

tubefeed (3.0.0), yt-queue (0.11.16) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.5)

yt-dlp PYPI version 2025.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.0 - yt-queue 0.11.16 - ytdl-sub =2025.9.9, =2025.9.13 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (3.2.6), mltask-utils (0.0.2) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.7.21)

yt-dlp PYPI version 2025.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.2.6 - mltask-utils 0.0.2 - nostr-dvm 1.1.3 - playlist2podcast 2.2.7 - tubefeed 2.1.7 - ytdl-sub =2025.7.24, =2025.8.15 Source cves:...

tubefeed (>=1.0.0, <=1.0.3), yt-dlp-transcript (0.1.19) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.12.13)

yt-dlp PYPI version 2024.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed =1.0.0, =1.0.3 - yt-dlp-transcript 0.1.19 - ytdl-sub 2024.12.14 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (2.1.10), ytdl-sub (>=2025.8.27.post3, <=2025.8.29) potentially affected by CVE-2026-55404 via yt-dlp (2025.8.22)

yt-dlp PYPI version 2025.8.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.10 - ytdl-sub =2025.8.27.post3, =2025.8.29 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (2.1.8), yt-queue (0.11.14) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.11)

yt-dlp PYPI version 2025.8.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.8 - yt-queue 0.11.14 - ytdl-sub =2025.8.15.post2, =2025.8.20 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (3.0.3), yt-queue (>=0.11.20, <=0.12.0) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.10.14)

yt-dlp PYPI version 2025.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.3 - yt-queue =0.11.20, =2025.10.15, =2025.10.16 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

streamsnapper (0.3.0), tnh-scholar (0.1.3) +5 more potentially affected by CVE-2026-55404 via yt-dlp (2025.1.15)

yt-dlp PYPI version 2025.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - streamsnapper 0.3.0 - tnh-scholar 0.1.3 - transcriber =0.1.0, =0.9.2, =2025.1.17, =2025.1.27 Source cves: CVE-2026-55404 Source advisory:...

tubefeed (2.0.6), ytdl-sub (2025.3.25) potentially affected by CVE-2026-55404 via yt-dlp (2025.3.25)

yt-dlp PYPI version 2025.3.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.6 - ytdl-sub 2025.3.25 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tk3u8 (>=0.3.2.dev19, <=0.4.0), tubefeed (2.1.5) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.25)

yt-dlp PYPI version 2025.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tk3u8 =0.3.2.dev19, =0.4.0 - tubefeed 2.1.5 - ytdl-sub 2025.6.27 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

modusa (>=0.3.85, <=0.4.29), tubefeed (3.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.23)

yt-dlp PYPI version 2025.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - modusa =0.3.85, =0.4.29 - tubefeed 3.0.1 - youtube-colab-proxy 1.0.2 - yt-queue 0.11.17 - ytdl-sub 2025.9.24 Source cves: CVE-2026-55404 Source...