tubefeed (2.1.9), yt-queue (0.11.15) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.20)

yt-dlp PYPI version 2025.8.20 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.9 - yt-queue 0.11.15 - ytdl-sub =2025.8.21, =2025.8.27 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...