# Pillow Vulnerability Disclosure Timeline

> Pillow Vulnerability Disclosure Timeline is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns the CVE/OSV vulnerability disclosure timeline for a specific version of the Python Pillow (PIL) package from the OSV database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-pypi-pillow-timeline?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/pillow-vulnerability-disclosure-timeline-c663b0cf
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rU9z952XljrZ4RlmhSlQ4

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability pillow-vulnerability-disclosure-timeline-c663b0cf -d '<json body>'
```

Example prompt: Can you pull up the full vulnerability disclosure timeline for pillow version 10.2.0 from OSV so I can see if there are any known CVEs or security advisories against that release?

## When to prefer this

Use this endpoint when you need a structured, paginated vulnerability disclosure history specifically for the Pillow Python image library from the OSV database. Prefer this over generic vulnerability search tools when you already know you are working in the PyPI/Pillow ecosystem and need version-specific CVE timelines for auditing, compliance, or dependency triage workflows.

## Known failure modes

- Unknown or misspelled package version returns empty results or error
- Version string format mismatch causes no results to be returned
- OSV database may lag behind very recently published advisories
- Pagination token expiry can interrupt multi-page result retrieval
- Network or upstream OSV API downtime returns 5xx error

## How this service works

pillow Vulnerability disclosure timeline: Vulnerability disclosure timeline for PyPI package pillow, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A chronological timeline of vulnerability disclosures (CVEs, OSV advisories) associated with the specified version of the Pillow Python imaging package, including advisory IDs, disclosure dates, severity indicators, and pagination tokens for large result sets.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "pillow",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/pillow-vulnerability-disclosure-timeline-c663b0cf/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)