appixer-metadata (>=1.0.0, <=1.0.2), bcipy (1.5.0) +11 more potentially affected by CVE-2026-55380 via pillow (8.0.0)

pillow PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - appixer-metadata =1.0.0, =0.2.0, =0.0.3, =1.0.1, =2.0.6, =0.7.0, =0.0.1, =0.3.0 Source cves: CVE-2026-55380 Source advisory: OSV:PYSEC-2026-2256...

adversarial-robustness-toolbox (1.2.0), aristote-malo (1.9.5) +79 more potentially affected by CVE-2026-55380 via pillow (7.0.0)

pillow PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-robustness-toolbox 1.2.0 - aristote-malo 1.9.5 - auto-annotate =1.0.0, =1.0.2, =0.1.0.dev31, =1.0.1, =0.2.3, =0.0.1.25, =0.2.1, =0.0.2,...

aider-chat (>=0.82.3, <=0.85.2), aider-code (>=0.1.0.dev19, <=0.1.1.post14) +186 more potentially affected by CVE-2026-55380 via pillow (11.2.1)

pillow PYPI version 11.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aider-chat =0.82.3, =0.1.0.dev19, =0.0.1, =3.1.20260611, =0.1.0, =0.2.0, =0.1.0, =2026.5.28, =2026.4.15, =2.0.6, =25.5.0, =0.0.0, =1.4.3, =0.5.0b2,...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 3lc (>=2.12.0, <=2.22.0) +2453 more potentially affected by CVE-2026-55380 via pillow (10.4.0)

pillow PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 11x-wagtail-blog =0.0.0, =2.12.0, =0.1.0, =0.1.3, =0.3.0, =0.1.3, =0.1.0, =0.1.4, =0.3.0, =0.2.1, =0.2.0, =0.0.1, =0.0.0, =0.0.9 and more Source...

2dify (1.0.1), 3deecelltracker (1.0.1) +2381 more potentially affected by CVE-2026-55380 via pillow (11.3.0)

pillow PYPI version 11.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2dify 1.0.1 - 3deecelltracker 1.0.1 - aaa-ml-datasets-course 1.0.0 - aaanalysis =1.0.1, =1.0.0, =0.2.0a0, =0.1.32, =0.0.29, =2.6.7, =0.1.3, =0.1.0,...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-55380 via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2026-55380 Source advisory: OSV:PYSEC-2026-2256...

al-for-design (0.0.1), autogluon (>=0.0.5, <=0.1.0b20210209) +48 more potentially affected by CVE-2026-55380 via pillow (6.2.1)

pillow PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - al-for-design 0.0.1 - autogluon =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1,...

altair-images (>=0.1.0, <=0.1.4), colorizexl (>=0.0.1, <=0.2.1) +13 more potentially affected by CVE-2026-55380 via pillow (7.1.1)

pillow PYPI version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - altair-images =0.1.0, =0.0.1, =0.0.5, =0.6.0.post3, =0.4.3, =0.6.18, =1.0.4, =0.0.95, =0.4.1.post1, =0.1.1, =0.0.1, =0.3.0, =1.3.0, =0.2.5, =0.2.6...

cleanunet (0.0.1), cryptoadvance-specter (>=0.0.2, <=0.2.0) +25 more potentially affected by CVE-2026-55380 via pillow (6.2.0)

pillow PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - cleanunet 0.0.1 - cryptoadvance-specter =0.0.2, =2.3.0rc2, =5.0.3, =0.1.4, =0.0.3, =0.1.9, =0.0.1, =1.13.0.dev5, =0.4.3, =0.4.4 and more Source cves...

abracadabra (0.0.6), agilecode-test-tools (>=0.4.0, <=0.5.0) +76 more potentially affected by CVE-2026-55380 via pillow (8.1.0)

pillow PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.6 - agilecode-test-tools =0.4.0, =0.1.1, =0.1.0, =0.11.0, =0.1.0, =0.4.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves:...

entweet (2.0.0), worldengine (0.18.0) potentially affected by CVE-2026-55380 via pillow (2.8.2)

pillow PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - entweet 2.0.0 - worldengine 0.18.0 Source cves: CVE-2026-55380 Source advisory: OSV:PYSEC-2026-2256...

adversarial-insight-ml (0.1.0), aioinstagrapi (>=1.1.19, <=1.1.21) +183 more potentially affected by CVE-2026-55380 via pillow (10.0.1)

pillow PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-insight-ml 0.1.0 - aioinstagrapi =1.1.19, =1.1.2, =1.7.3, =0.0.1, =0.0.29, =0.1.0, =4.4.0.69, =4.0.0, =1.0.0, =1.0.1 and more Source...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +9145 more potentially affected by CVE-2026-55379 via pillow (>=2.0.0, <=12.2.0)

pillow PYPI version =2.0.0, =0.0.0, =0.3.0, =0.1.0, =0.5.0a0, =2.3.84, =0.1.0, =0.0.6, =0.1.0, =0.1.0, =2.0.0, =2.0.2 and more Source cves: CVE-2026-55379 Source advisory: MEND:CVE-2026-55379...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35338 via uu_chmod (>=0.0.14, <=0.0.16)

uuchmod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35338 Source advisory: OSV:GHSA-4C7Q-4928-8445...

bpp-iplweb (>=202209.1088.0, <=202504.1174.0), circe-transformations-certic (0.0.3) +1 more potentially affected by CVE-2026-49452 via weasyprint (55.0.0)

weasyprint PYPI version 55.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - bpp-iplweb =202209.1088.0, =202504.1174.0 - circe-transformations-certic 0.0.3 - render50 8.0.0 Source cves: CVE-2026-49452 Source advisory...

mpi-cbs-mediforms (0.1.0a2) potentially affected by CVE-2026-49452 via weasyprint (58.0.0)

weasyprint PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms 0.1.0a2 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...

brs-xss (4.0.0), complio (0.1.2) +14 more potentially affected by CVE-2026-49452 via weasyprint (60.2.0)

weasyprint PYPI version 60.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - brs-xss 4.0.0 - complio 0.1.2 - gendazpack 0.1.0 - investments 0.2.0 - invocr =1.0.0, =0.1.0, =0.1.4.29, =0.1.0, =0.1.10, =21.8.0, =0.1.0,...

agenticmem (>=0.1.4.1, <=0.1.5.0), biomni-bridge (>=0.3.1, <=0.3.3) +27 more potentially affected by CVE-2026-49452 via weasyprint (66.0.0)

weasyprint PYPI version 66.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - agenticmem =0.1.4.1, =0.3.1, =1.0.1, =0.1.2, =2025.1.0b3, =2026.3.0b2, =1.2.15, =2025.1.0b3, =1.0.3, =0.1.0, =1.59.6rc0, =1.67.5 and more...

ai-parrot (>=0.20.3, <=0.23.12), arthexis (>=0.2.4, <=0.11.0) +20 more potentially affected by CVE-2026-49452 via weasyprint (>=68.0.0, <=68.1.0)

weasyprint PYPI version =68.0.0, =0.20.3, =0.2.4, =0.1.2, =0.0.1.dev20250508, =2026.7.4, =1.10.1, =0.3.1, =0.1.0, =1.3.40, =0.1.0, =1.2.4, =0.3.1, =0.3.5 and more Source cves: CVE-2026-49452 Source advisory: GHSA-JHHC-3HCP-QHM5...

scout-browser (>=4.10.1, <=4.47.0) potentially affected by CVE-2026-49452 via weasyprint (0.42.3)

weasyprint PYPI version 0.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - scout-browser =4.10.1, =4.47.0 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...