agentic-doc (>=0.0.1, <=0.0.18), background-remover-model (1.0.1) +6 more potentially affected by CVE-2026-28231 via pillow-heif (0.16.0)

pillow-heif PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow-heif and may be impacted: - agentic-doc =0.0.1, =0.0.1, =0.1.0a0, =9.1.0, =0.2.64, =1.1.20 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...