tubefeed (3.0.0), yt-queue (0.11.16) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2025.9.5)

yt-dlp PYPI version 2025.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.0 - yt-queue 0.11.16 - ytdl-sub =2025.9.9, =2025.9.13 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

feed2fedi (>=3.2.10, <=3.2.11), playlist2podcast (>=2.2.11, <=2.2.13) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2025.9.26)

yt-dlp PYPI version 2025.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.10, =2.2.11, =2025.9.27, =2025.10.12.post1 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

modusa (>=0.3.85, <=0.4.29), tubefeed (3.0.1) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2025.9.23)

yt-dlp PYPI version 2025.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - modusa =0.3.85, =0.4.29 - tubefeed 3.0.1 - youtube-colab-proxy 1.0.2 - yt-queue 0.11.17 - ytdl-sub 2025.9.24 Source cves: CVE-2026-50574 Source...

ethos-cli (0.1.0), flowsets (0.0.9) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2025.1.26)

yt-dlp PYPI version 2025.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ethos-cli 0.1.0 - flowsets 0.0.9 - rvc-cli =1.1.0, =0.11.8, =2025.1.28, =2025.2.17 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3...

africanwhisper (>=0.2.9, <=0.9.0), yt-queue (>=0.3.0, <=0.7.1) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2023.11.14)

yt-dlp PYPI version 2023.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - africanwhisper =0.2.9, =0.3.0, =0.7.1 - ytdl-sub 2023.11.15 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

tubefeed (2.1.9), yt-queue (0.11.15) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2025.8.20)

yt-dlp PYPI version 2025.8.20 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.9 - yt-queue 0.11.15 - ytdl-sub =2025.8.21, =2025.8.27 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

yt-queue (0.10.1), ytdl-sub (>=2024.7.4, <=2024.7.4.post1) potentially affected by CVE-2026-50574 via yt-dlp (2024.7.2)

yt-dlp PYPI version 2024.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.10.1 - ytdl-sub =2024.7.4, =2024.7.4.post1 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

yt-queue (0.10.1), ytdl-sub (>=2024.7.4, <=2024.7.4.post1) potentially affected by CVE-2026-50023 via yt-dlp (2024.7.2)

yt-dlp PYPI version 2024.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.10.1 - ytdl-sub =2024.7.4, =2024.7.4.post1 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

tubefeed (3.0.3), yt-queue (>=0.11.20, <=0.12.0) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2025.10.14)

yt-dlp PYPI version 2025.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 3.0.3 - yt-queue =0.11.20, =2025.10.15, =2025.10.16 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

buzz-captions (1.2.0), dl-a2t (>=0.0.0, <=0.0.1.1) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.9.27)

yt-dlp PYPI version 2024.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions 1.2.0 - dl-a2t =0.0.0, =2024.10.1.post2, =2024.10.6 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

tubefeed (2.1.8), yt-queue (0.11.14) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2025.8.11)

yt-dlp PYPI version 2025.8.11 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.8 - yt-queue 0.11.14 - ytdl-sub =2025.8.15.post2, =2025.8.20 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

yt-queue (0.11.6), ytdl-sub (2024.12.4) potentially affected by CVE-2026-50574 via yt-dlp (2024.12.3)

yt-dlp PYPI version 2024.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.11.6 - ytdl-sub 2024.12.4 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

tubefeed (2.1.9), yt-queue (0.11.15) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2025.8.20)

yt-dlp PYPI version 2025.8.20 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.9 - yt-queue 0.11.15 - ytdl-sub =2025.8.21, =2025.8.27 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

africanwhisper (>=0.2.9, <=0.9.0), yt-queue (>=0.3.0, <=0.7.1) +1 more potentially affected by CVE-2024-38519 via yt-dlp (2023.11.14)

yt-dlp PYPI version 2023.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - africanwhisper =0.2.9, =0.3.0, =0.7.1 - ytdl-sub 2023.11.15 Source cves: CVE-2024-38519 Source advisory: OSV:PYSEC-2026-2065...

africanwhisper (0.2.8), gridplayer (0.5.3) +5 more potentially affected by CVE-2024-38519 via yt-dlp (2023.10.13)

yt-dlp PYPI version 2023.10.13 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - africanwhisper 0.2.8 - gridplayer 0.5.3 - ripandtear =0.9.42, =1.2.9, =0.0.0, =2023.10.21.post1, =0.3.0, =0.4.2 Source cves: CVE-2024-38519...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-50574 Source advisory:...

music-tool-kit (>=1.3.25, <=1.3.27), nostr-dvm (>=0.6.22, <=0.9.9) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.5.27)

yt-dlp PYPI version 2024.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.25, =0.6.22, =0.1.50, =2024.5.29, =2024.6.6 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

tubefeed (2.1.9), yt-queue (0.11.15) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2025.8.20)

yt-dlp PYPI version 2025.8.20 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.1.9 - yt-queue 0.11.15 - ytdl-sub =2025.8.21, =2025.8.27 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...