siena-mls (>=18.1.0, <=19.0.0) potentially affected by CVE-2026-28231 via pi-heif (0.13.1)

pi-heif PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - siena-mls =18.1.0, =19.0.0 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

siena-mls (>=18.1.0, <=19.0.0) potentially affected by CVE-2026-28231 via pi-heif (0.13.1)

pi-heif PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on pi-heif and may be impacted: - siena-mls =18.1.0, =19.0.0 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...