3deecelltracker (>=0.5.1a0, <=0.5.2a0), adversarial-attacks-white-black-box (0.1.7) +200 more potentially affected by CVE-2026-55380 via pillow (9.3.0)

pillow PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker =0.5.1a0, =1.5.0rc1, =0.0.3, =22.11.2, =2.6.17, =0.1.0a0, =0.1.0, =0.0.1a1, =0.3.1rc5, =0.8.0, =22.43.1, =22.52.1 and more Source...

alastria-auth (>=0.0.3, <=0.0.17), alastria-identity (>=0.2.0, <=0.4.0) +60 more potentially affected by CVE-2026-39373 via jwcrypto (>=0.4.0, <=1.5.6)

jwcrypto PYPI version =0.4.0, =0.0.3, =0.2.0, =1.0.0, =1.0.0rc2, =0.1.0, =0.1.0, =0.1.0, =0.11.0rc1, =0.4.0a0, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0.2, =0.1.0.8 and more Source cves: CVE-2026-39373 Source advisory: MEND:CVE-2026-39373...

alastria-auth (>=0.0.3, <=0.0.17), alastria-identity (>=0.2.0, <=0.4.0) +9 more potentially affected by CVE-2024-28102 via jwcrypto (0.8.0)

jwcrypto PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - alastria-auth =0.0.3, =0.2.0, =0.4.0a0, =0.1.0.2, =3.18.0, =0.1.0, =0.0.1, =1.0.6, =1.0.0, =2.7.1, =3.1.3 Source cves: CVE-2024-28102 Source...