africanwhisper (>=0.2.9, <=0.9.0), yt-queue (>=0.3.0, <=0.7.1) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.14)

yt-dlp PYPI version 2023.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - africanwhisper =0.2.9, =0.3.0, =0.7.1 - ytdl-sub 2023.11.15 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...