3lc (>=2.3.84, <=2.11.2), a-data-processing (0.0.1) +295 more potentially affected by CVE-2026-112902 via pillow (10.2.0)

pillow PYPI version 10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3lc =2.3.84, =0.2.3, =1.6.0, =0.21.0, =0.0.2, =0.0.1, =0.0.1, =24.2.0, =0.0.7, =1.0.3.dev0, =1.1.0 and more Source cves: CVE-2026-112902 Source...

chromewhip (>=0.2.2, <=0.2.16), cloud-volume (>=0.6.12, <=0.8.1) +11 more potentially affected by CVE-2026-112902 via pillow (4.2.1)

pillow PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - chromewhip =0.2.2, =0.6.12, =4.4.1, =0.0.1a0, =0.9.0, =0.6.19a0, =0.3.5, =0.0.3, =11.0.0, =11.2.0 Source cves: CVE-2026-112902 Source advisory:...

entweet (2.0.0), worldengine (0.18.0) potentially affected by CVE-2026-112902 via pillow (2.8.2)

pillow PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - entweet 2.0.0 - worldengine 0.18.0 Source cves: CVE-2026-112902 Source advisory: OSV:GHSA-XVH5-G6GV-559V...

aamutils (>=0.0.1, <=0.0.10), aau-gomapedge-etl (>=0.3.2, <=0.4.1) +324 more potentially affected by CVE-2026-112902 via pillow (10.3.0)

pillow PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils =0.0.1, =0.3.2, =0.1.0, =1.7.0, =0.9.5, =0.1.0, =0.1.10, =24.5.0, =1.0.5, =0.1.0, =0.1.1 - arcplot 1.0.0 and more Source cves:...

adversarial-robustness-toolbox (1.2.0), aristote-malo (1.9.5) +79 more potentially affected by CVE-2026-112902 via pillow (7.0.0)

pillow PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-robustness-toolbox 1.2.0 - aristote-malo 1.9.5 - auto-annotate =1.0.0, =1.0.2, =0.1.0.dev31, =1.0.1, =0.2.3, =0.0.1.25, =0.2.1, =0.0.2,...

cleanunet (0.0.1), cryptoadvance-specter (>=0.0.2, <=0.2.0) +25 more potentially affected by CVE-2026-112902 via pillow (6.2.0)

pillow PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - cleanunet 0.0.1 - cryptoadvance-specter =0.0.2, =2.3.0rc2, =5.0.3, =0.1.4, =0.0.3, =0.1.9, =0.0.1, =1.13.0.dev5, =0.4.3, =0.4.4 and more Source cves...

alphad3m (>=0.10.0.dev0, <=0.10.0.dev1), amazoncaptcha (>=0.0.9, <=0.3.9) +55 more potentially affected by CVE-2026-112902 via pillow (7.1.2)

pillow PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - alphad3m =0.10.0.dev0, =0.0.9, =0.0.1, =1.2.0, =0.1.3, =2.0.0rc1, =0.0.1, =1.2.4, =0.1.0, =0.3.1, =0.0.1, =0.1.4, =2022.1.5, =2022.5.26 and more...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2026-112902 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2026-112902 Source advisory: OSV:GHSA-XVH5-G6GV-559V...

agentomics (>=0.1.0rc1, <=1.2.0), airunner (>=5.0.0, <=5.6.1) +136 more potentially affected by CVE-2026-112902 via pillow (12.0.0)

pillow PYPI version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - agentomics =0.1.0rc1, =5.0.0, =1.0.5, =25.11.0, =0.1.27, =0.1.0, =0.1.0.post5, =0.0.34, =7.0.3, =0.1.0a1, =2.9.0, =0.1.0, =0.1.0, =0.1.3 and more...

addownloader (0.2.11), airosentris (>=0.1.8, <=0.1.31) +211 more potentially affected by CVE-2026-112902 via pillow (11.0.0)

pillow PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - addownloader 0.2.11 - airosentris =0.1.8, =0.0.0, =24.11.0, =3.0.0.dev38, =0.4.0rc6, =0.2.2b2, =0.1.2, =4.2.1, =0.8.26, =0.2.0, =0.4.0, =0.60.2,...

aioload (0.4.0), amazoncaptcha (0.5.0) +67 more potentially affected by CVE-2026-112902 via pillow (8.0.1)

pillow PYPI version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aioload 0.4.0 - amazoncaptcha 0.5.0 - apricopt =0.0.1a1.dev5, =0.1.0, =0.1.7, =0.1.3, =1.37.0, =1.38.1 - blendedux 0.0.2 and more Source cves:...

2xh-leet (0.1.2), actfw-core (>=2.0.0a0, <=2.1.1) +92 more potentially affected by CVE-2026-112902 via pillow (5.4.1)

pillow PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2xh-leet 0.1.2 - actfw-core =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.57.1b6141, =2.0.1, =0.4.0, =0.4.0, =0.0.2, =4.3.0, =2.17.0, =0.5.0, =2.0.0,...

aichatbot (0.0.1), aiqc (>=2.1.0, <=7.1.5) +53 more potentially affected by CVE-2026-112902 via pillow (8.1.2)

pillow PYPI version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aichatbot 0.0.1 - aiqc =2.1.0, =0.0.2, =0.0.1, =0.14.0, =0.14.0, =0.0.0a1, =2.0.1, =0.2.0, =0.0.2, =3.0.8rc6, =3.0.8rc7 - django-image-assets 0.2.0...

3deecelltracker (>=0.5.1a0, <=0.5.2a0), adversarial-attacks-white-black-box (0.1.7) +200 more potentially affected by CVE-2026-112902 via pillow (9.3.0)

pillow PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker =0.5.1a0, =1.5.0rc1, =0.0.3, =22.11.2, =2.6.17, =0.1.0a0, =0.1.0, =0.0.1a1, =0.3.1rc5, =0.8.0, =22.43.1, =22.52.1 and more Source...

academic-emotion (0.1.2), afipcaeqrdecode (>=0.0.1b0, <=0.0.4) +274 more potentially affected by CVE-2026-112902 via pillow (10.1.0)

pillow PYPI version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - academic-emotion 0.1.2 - afipcaeqrdecode =0.0.1b0, =0.1.6, =0.1.0, =23.11.0, =0.9.0, =0.3.5rc1, =0.1.0, =1.2.0 - asterai 0.1.1 - automate3 2023.11....

arpegio (>=0.1.3, <=0.3.4), django-versatileimagefield (1.6.1) +2 more potentially affected by CVE-2026-112902 via pillow (3.3.3)

pillow PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - arpegio =0.1.3, =0.6.12a3, =0.6.12 Source cves: CVE-2026-112902 Source advisory: OSV:GHSA-XVH5-G6GV-559V...

diacamma-asso (>=2.0.1.16012810, <=2.1.16.17102513), diacamma-financial (>=2.0.1.16012810, <=2.1.15.17102513) +5 more potentially affected by CVE-2026-112902 via pillow (2.8.0)

pillow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - diacamma-asso =2.0.1.16012810, =2.0.1.16012810, =2.0.1.16012810, =2.0.1.15101417, =2.0.1.15101417, =2.0.1.15101417, =0.1.2.1, =0.1.3 Source cves:...