tubefeed (2.1.8), yt-queue (0.11.14) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.11)

yt-dlp PYPI version 2025.8.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.8 - yt-queue 0.11.14 - ytdl-sub =2025.8.15.post2, =2025.8.20 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...