buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...