aijson-meta (>=0.1.3, <=0.1.4), docrx (>=0.0.110, <=0.0.113) +7 more potentially affected by CVE-2026-28231 via pi-heif (0.22.0)

pi-heif PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - aijson-meta =0.1.3, =0.0.110, =0.1.0, =0.3.19, =0.1.2, =0.1.0, =0.1.26, =1.0.0, =0.9.0, =0.14.0 Source cves: CVE-2026-28231 Source advisory:...

janus-llm (>=4.2.0, <=4.5.4) potentially affected by CVE-2026-28231 via pi-heif (0.20.0)

pi-heif PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - janus-llm =4.2.0, =4.5.4 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

contextifier (>=0.1.0, <=0.2.2), endi (>=2025.1.0b3, <=2026.4.7) +4 more potentially affected by CVE-2026-28231 via pi-heif (>=1.1.1, <=1.2.0)

pi-heif PYPI version =1.1.1, =0.1.0, =2025.1.0b3, =2026.3.0b2, =2025.1.0b3, =0.2.5, =0.1.0, =0.3.0 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

contextifier (>=0.1.0, <=0.2.2), endi (>=2025.1.0b3, <=2026.4.7) +4 more potentially affected by CVE-2026-28231 via pi-heif (>=1.1.1, <=1.2.0)

pi-heif PYPI version =1.1.1, =0.1.0, =2025.1.0b3, =2026.3.0b2, =2025.1.0b3, =0.2.5, =0.1.0, =0.3.0 Source cves: CVE-2026-28231 Source advisory: GHSA-5GJJ-6R7V-PH3X...

hespi (0.2.4), picframe (2023.7.26.post1) +1 more potentially affected by CVE-2026-28231 via pi-heif (0.16.0)

pi-heif PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - hespi 0.2.4 - picframe 2023.7.26.post1 - pylexfluent =0.0.21, =0.1.24 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

siena-mls (>=18.1.0, <=19.0.0) potentially affected by CVE-2026-28231 via pi-heif (0.13.1)

pi-heif PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - siena-mls =18.1.0, =19.0.0 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

clarifai-datautils (>=0.0.4, <=0.0.7), mimir-ai (0.0.3) potentially affected by CVE-2026-28231 via pi-heif (0.18.0)

pi-heif PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - clarifai-datautils =0.0.4, =0.0.7 - mimir-ai 0.0.3 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

clarifai-datautils (>=0.0.4, <=0.0.7), mimir-ai (0.0.3) potentially affected by CVE-2026-28231 via pi-heif (0.18.0)

pi-heif PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - clarifai-datautils =0.0.4, =0.0.7 - mimir-ai 0.0.3 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...

hespi (0.2.4), picframe (2023.7.26.post1) +1 more potentially affected by CVE-2026-28231 via pi-heif (0.16.0)

pi-heif PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - hespi 0.2.4 - picframe 2023.7.26.post1 - pylexfluent =0.0.21, =0.1.24 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...

aijson-meta (>=0.1.3, <=0.1.4), docrx (>=0.0.110, <=0.0.113) +7 more potentially affected by CVE-2026-28231 via pi-heif (0.22.0)

pi-heif PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - aijson-meta =0.1.3, =0.0.110, =0.1.0, =0.3.19, =0.1.2, =0.1.0, =0.1.26, =1.0.0, =0.9.0, =0.14.0 Source cves: CVE-2026-28231 Source advisory:...

siena-mls (>=18.1.0, <=19.0.0) potentially affected by CVE-2026-28231 via pi-heif (0.13.1)

pi-heif PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - siena-mls =18.1.0, =19.0.0 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...

contextifier (>=0.1.0, <=0.2.2), endi (>=2025.1.0b3, <=2026.4.7) +4 more potentially affected by CVE-2026-28231 via pi-heif (>=1.1.1, <=1.2.0)

pi-heif PYPI version =1.1.1, =0.1.0, =2025.1.0b3, =2026.3.0b2, =2025.1.0b3, =0.2.5, =0.1.0, =0.3.0 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...

janus-llm (>=4.2.0, <=4.5.4) potentially affected by CVE-2026-28231 via pi-heif (0.20.0)

pi-heif PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - janus-llm =4.2.0, =4.5.4 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...

aijson-meta (>=0.1.3, <=0.1.4), clarifai-datautils (>=0.0.4, <=0.0.7) +19 more potentially affected by CVE-2026-28231 via pi-heif (>=0.13.1, <=1.2.0)

pi-heif PYPI version =0.13.1, =0.1.3, =0.0.4, =0.1.0, =0.0.110, =0.1.0, =0.3.19, =0.1.2, =0.1.0, =2025.1.0b3, =2026.3.0b2, =4.2.0, =2025.1.0b3, =2026.5.0a1 - picframe 2023.7.26.post1 and more Source cves: CVE-2026-28231 Source advisory: MEND:CVE-2026-28231...