adversarial-robustness-toolbox (1.2.0), aristote-malo (1.9.5) +79 more potentially affected by CVE-2026-54059 via pillow (7.0.0)

pillow PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-robustness-toolbox 1.2.0 - aristote-malo 1.9.5 - auto-annotate =1.0.0, =1.0.2, =0.1.0.dev31, =1.0.1, =0.2.3, =0.0.1.25, =0.2.1, =0.0.2,...

2xh-leet (0.1.2), actfw-core (>=2.0.0a0, <=2.1.1) +92 more potentially affected by CVE-2026-54059 via pillow (5.4.1)

pillow PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2xh-leet 0.1.2 - actfw-core =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.57.1b6141, =2.0.1, =0.4.0, =0.4.0, =0.0.2, =4.3.0, =2.17.0, =0.5.0, =2.0.0,...

abayestest (>=0.0.2, <=0.0.4), adeso (>=0.0.1, <=0.0.4) +121 more potentially affected by CVE-2026-54059 via pillow (10.0.0)

pillow PYPI version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abayestest =0.0.2, =0.0.1, =0.7.1, =0.3.4rc1, =0.0.0, =4.4.0.46, =0.0.17, =23.28.1, =0.1.18, =1.0.0b0, =1.0.2, =0.6.15, =1.0.0, =0.0.1, =0.0.12 and...

2dify (1.0.1), 3deecelltracker (1.0.1) +2381 more potentially affected by CVE-2026-54059 via pillow (11.3.0)

pillow PYPI version 11.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2dify 1.0.1 - 3deecelltracker 1.0.1 - aaa-ml-datasets-course 1.0.0 - aaanalysis =1.0.1, =1.0.0, =0.2.0a0, =0.1.32, =0.0.29, =2.6.7, =0.1.3, =0.1.0,...

abraia (0.9.4), agave-pyclient (>=1.2.3, <=1.2.4) +78 more potentially affected by CVE-2026-54059 via pillow (9.0.0)

pillow PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abraia 0.9.4 - agave-pyclient =1.2.3, =3.2.0, =0.3.2, =0.23.0, =0.4.0, =0.8.0, =0.1.2, =1.39.0, =1.49.0.post1 and more Source cves: CVE-2026-54059...

entweet (2.0.0), worldengine (0.18.0) potentially affected by CVE-2026-54059 via pillow (2.8.2)

pillow PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - entweet 2.0.0 - worldengine 0.18.0 Source cves: CVE-2026-54059 Source advisory: OSV:GHSA-8V84-F9PQ-WR9X...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-54059 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2026-54059 Source advisory: OSV:GHSA-8V84-F9PQ-WR9X...

astro-simpleanalytics-plugin (0.4.0), create-sorapaper-astro-theme (1.0.0) +2 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.0.6)

astro NPM version =7.0.2, =0.1.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-18085586...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a1st/aix (>=0.0.3, <=0.8.0) +727 more potentially affected by CVE-2026-73422 via astro (>=2.9.0, <=7.0.6)

astro NPM version =2.9.0, =0.0.1, =0.0.3, =0.2.0, =1.1.0, =1.0.0, =1.3.0, =0.9.0, =0.1.6, =1.0.0, =0.5.0, =1.0.0, =1.0.5 - @arya-technologies/astro-template 0.0.1 - @astro-component/button 0.0.1 and more Source cves: CVE-2026-73422 Source advisory: OSV:GHSA-4G3V-8H47-V7G6...

2dify (1.0.1), 3deecelltracker (1.0.1) +2381 more potentially affected by CVE-2026-54058 via pillow (11.3.0)

pillow PYPI version 11.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2dify 1.0.1 - 3deecelltracker 1.0.1 - aaa-ml-datasets-course 1.0.0 - aaanalysis =1.0.1, =1.0.0, =0.2.0a0, =0.1.32, =0.0.29, =2.6.7, =0.1.3, =0.1.0,...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), 2022-2-gces-ifpf (0.3.0) +1333 more potentially affected by CVE-2026-54058 via pillow (9.5.0)

pillow PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 170051277-trab-final-gces =0.3.0, =0.1.0, =0.1.0, =2.0.1, =0.1.4, =1.2.5, =0.1.0, =1.2.0, =1.10.3, =0.61.9b59, =1.3.1 and more Source cves:...

addownloader (0.2.11), airosentris (>=0.1.8, <=0.1.31) +207 more potentially affected by CVE-2026-54058 via pillow (11.0.0)

pillow PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - addownloader 0.2.11 - airosentris =0.1.8, =0.0.0, =24.11.0, =3.0.0.dev38, =0.4.0rc6, =0.2.2b2, =0.1.2, =4.2.1, =0.8.26, =0.2.0, =0.4.0, =0.60.2,...

dcicsnovault (>=2.0.0b0, <=2.0.0b11), shot-detector (0.0.4.dev41) +2 more potentially affected by CVE-2026-54058 via pillow (3.3.0)

pillow PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b0, =0.2.3, =0.0.1, =0.1.0 Source cves: CVE-2026-54058 Source advisory: OSV:GHSA-62P4-GMF7-7G93...

groupyapi (0.7.1) potentially affected by CVE-2026-54058 via pillow (2.5.3)

pillow PYPI version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - groupyapi 0.7.1 Source cves: CVE-2026-54058 Source advisory: OSV:GHSA-62P4-GMF7-7G93...

azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-54058 via pillow (7.1.0)

pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...

agkit (>=0.17.0, <=0.26.0), ai-puti (0.1.0b5) +237 more potentially affected by CVE-2026-54058 via pillow (11.1.0)

pillow PYPI version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - agkit =0.17.0, =0.2.0, =0.1.0, =0.76.0, =0.1.1, =3.1.8, =0.1.0, =0.1.0, =0.5.0, =25.2.0, =1.0.4, =0.1.0, =0.1.12 - arched-emailer 0.4.6 and more...

blockies (0.0.2), cdt-test (>=0.1.0, <=0.1.7) +33 more potentially affected by CVE-2026-54058 via pillow (6.1.0)

pillow PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.2 - cdt-test =0.1.0, =1.1.0, =0.3.0, =0.1.0, =0.1.3, =0.1.2, =0.0.2, =1.1.0, =0.9.939.507, =0.9.939.518 - happy-tree-gallery 0.8.0 and...

django-oscar (>=1.1.0, <=1.1.1), django-oscar-telegram-bot (>=0.1.0, <=0.5.0) +2 more potentially affected by CVE-2026-54058 via pillow (2.7.0)

pillow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-oscar =1.1.0, =0.1.0, =0.1.0, =0.1.1, =0.2.1 Source cves: CVE-2026-54058 Source advisory: OSV:GHSA-62P4-GMF7-7G93...

chromewhip (>=0.2.2, <=0.2.16), cloud-volume (>=0.6.12, <=0.8.1) +11 more potentially affected by CVE-2026-54058 via pillow (4.2.1)

pillow PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - chromewhip =0.2.2, =0.6.12, =4.4.1, =0.0.1a0, =0.9.0, =0.6.19a0, =0.3.5, =0.0.3, =11.0.0, =11.2.0 Source cves: CVE-2026-54058 Source advisory:...

aceui (>=1.0.2, <=1.0.21), biseau (>=0.0.1, <=0.0.18) +23 more potentially affected by CVE-2026-54058 via pillow (5.3.0)

pillow PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aceui =1.0.2, =0.0.1, =0.1.0, =0.1.1, =0.1.0, =0.3.0, =0.2.0, =1.0.0a1, =0.7.0a1, =1.0.8, =1.0.10 - nider 0.5.0 - optimuspyspark 2.1.1 and more Sour...