feed2fedi (>=3.2.7, <=3.2.9), playlist2podcast (>=2.2.8, <=2.2.10) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.8.27)

yt-dlp PYPI version 2025.8.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.7, =2.2.8, =2025.8.29.post1, =2025.9.6.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-fts (>=0.1.55, <=0.1.59), yt-queue (0.10.2) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2024.7.16)

yt-dlp PYPI version 2024.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-fts =0.1.55, =0.1.59 - yt-queue 0.10.2 - ytdl-sub 2024.7.21 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

music-tool-kit (>=1.3.31, <=1.3.32), ytdl-sub (2024.7.13) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.9)

yt-dlp PYPI version 2024.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - music-tool-kit =1.3.31, =1.3.32 - ytdl-sub 2024.7.13 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

modusa (>=0.3.85, <=0.4.29), tubefeed (3.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.9.23)

yt-dlp PYPI version 2025.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - modusa =0.3.85, =0.4.29 - tubefeed 3.0.1 - youtube-colab-proxy 1.0.2 - yt-queue 0.11.17 - ytdl-sub 2025.9.24 Source cves: CVE-2026-55404 Source...

amusing-app (>=0.1.0, <=0.1.2), mamkit (>=0.1.0, <=1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.16)

yt-dlp PYPI version 2023.11.16 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - amusing-app =0.1.0, =0.1.0, =1.3.2, =0.0.1, =2023.11.16, =2024.1.5.post4 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.30)

yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-554...

tubefeed (2.0.7), whisply (0.10.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.26)

yt-dlp PYPI version 2025.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.7 - whisply 0.10.3 - ytdl-sub 2025.3.26 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

mamkit (0.1.2), tubefeed (2.0.8) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.3.27)

yt-dlp PYPI version 2025.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - mamkit 0.1.2 - tubefeed 2.0.8 - ytdl-sub 2025.3.31 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (>=3.2.0, <=3.2.1), music-bot-py (1.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2025.4.30)

yt-dlp PYPI version 2025.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi =3.2.0, =0.10.4, =2025.5.1, =2025.5.5 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

nostr-dvm (>=0.9.10, <=1.1.2), yt-queue (0.11.5) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.11.4)

yt-dlp PYPI version 2024.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nostr-dvm =0.9.10, =2024.11.5, =2024.11.26 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-queue (0.11.6), ytdl-sub (2024.12.4) potentially affected by CVE-2026-55404 via yt-dlp (2024.12.3)

yt-dlp PYPI version 2024.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.11.6 - ytdl-sub 2024.12.4 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

cplayer (>=1.1.1, <=1.2.0), eagle-downloader (>=1.0.1.1, <=1.0.2.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2023.9.24)

yt-dlp PYPI version 2023.9.24 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - cplayer =1.1.1, =1.0.1.1, =0.1.1, =2023.9.24, =2023.10.21 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tk3u8 (>=0.3.2.dev19, <=0.4.0), tubefeed (2.1.5) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2025.6.25)

yt-dlp PYPI version 2025.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tk3u8 =0.3.2.dev19, =0.4.0 - tubefeed 2.1.5 - ytdl-sub 2025.6.27 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

ytdl-sub (2024.12.8) potentially affected by CVE-2026-55404 via yt-dlp (2024.12.6)

yt-dlp PYPI version 2024.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub 2024.12.8 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

ytdl-sub (2024.7.2.post1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.1)

yt-dlp PYPI version 2024.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ytdl-sub 2024.7.2.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

tubefeed (2.0.1), ytdl-sub (2025.1.15) potentially affected by CVE-2026-55404 via yt-dlp (2025.1.12)

yt-dlp PYPI version 2025.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - tubefeed 2.0.1 - ytdl-sub 2025.1.15 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

yt-queue (0.10.1), ytdl-sub (>=2024.7.4, <=2024.7.4.post1) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.2)

yt-dlp PYPI version 2024.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - yt-queue 0.10.1 - ytdl-sub =2024.7.4, =2024.7.4.post1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

buzz-captions (>=1.0.0, <=1.1.0), music-tool-kit (1.3.5) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.3.10)

yt-dlp PYPI version 2024.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - buzz-captions =1.0.0, =0.0.1, =2024.3.19, =2024.4.3 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

feed2fedi (3.1.1), lingq (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2026-55404 via yt-dlp (2024.10.22)

yt-dlp PYPI version 2024.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - feed2fedi 3.1.1 - lingq =1.0.0, =2024.10.23, =2024.10.31 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

africanwhisper (>=0.2.9, <=0.9.0), yt-queue (>=0.3.0, <=0.7.1) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.11.14)

yt-dlp PYPI version 2023.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - africanwhisper =0.2.9, =0.3.0, =0.7.1 - ytdl-sub 2023.11.15 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...