ethos-cli (0.1.0), flowsets (0.0.9) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.1.26)

yt-dlp PYPI version 2025.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ethos-cli 0.1.0 - flowsets 0.0.9 - rvc-cli =1.1.0, =0.11.8, =2025.1.28, =2025.2.17 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3...