lib-sync (>=0.2.0, <=0.2.2), songbirdcli (0.2.8) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.9)

yt-dlp PYPI version 2025.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - lib-sync =0.2.0, =0.0.1, =2025.6.12, =2025.6.19.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...