imgtools-cli (>=1.0.3, <=1.0.8) potentially affected by CVE-2026-28231 via pillow-heif (0.9.0)

pillow-heif PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow-heif and may be impacted: - imgtools-cli =1.0.3, =1.0.8 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

imgtools-cli (>=1.0.3, <=1.0.8) potentially affected by CVE-2026-28231 via pillow-heif (0.9.0)

pillow-heif PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow-heif and may be impacted: - imgtools-cli =1.0.3, =1.0.8 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2258...