agentic-doc (>=0.0.1, <=0.0.18), background-remover-model (1.0.1) +6 more potentially affected by CVE-2026-28231 via pillow-heif (0.16.0)

pillow-heif PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow-heif and may be impacted: - agentic-doc =0.0.1, =0.0.1, =0.1.0a0, =9.1.0, =0.2.64, =1.1.20 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

aiagentgraph (>=0.0.1, <=0.0.4a1), cvscout (1.0.0) +7 more potentially affected by CVE-2026-55443 via langchain (0.2.0)

langchain PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - aiagentgraph =0.0.1, =0.0.1, =1.5.2.dev14, =0.2.0, =0.3.4, =1.0.3, =1.0.4 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...