Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-59200 |
|
Vulnerability in Pillow (CVE-2026-59200)
vulnerability in Pillow (CVE-2026-59200). Risk of unauthorized operations or information disclosure. Exploitable via ``PdfParser.py``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-59197 |
|
Vulnerability in Pillow (CVE-2026-59197)
vulnerability in Pillow (CVE-2026-59197). Risk of unauthorized operations or information disclosure. Exploitable via ``INT_MAX``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-54058 |
|
Out-of-Bounds Read in pillow (CVE-2026-54058)
vulnerability in pillow (CVE-2026-54058). Confidential information can be exposed externally. Exploitable via ``raw``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-59205 |
|
Out-of-Bounds Write in pillow (CVE-2026-59205)
out-of-bounds write in pillow (CVE-2026-59205). Risk of unauthorized operations or information disclosure. Exploitable via ``imOut``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-59204 |
|
Vulnerability in pillow (CVE-2026-59204)
vulnerability in pillow (CVE-2026-59204). Risk of unauthorized operations or information disclosure. Exploitable via ``total_component_width``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-59203 |
|
Vulnerability in pillow (CVE-2026-59203)
vulnerability in pillow (CVE-2026-59203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-59199 |
|
Vulnerability in Pillow (CVE-2026-59199)
vulnerability in Pillow (CVE-2026-59199). Risk of unauthorized operations or information disclosure. Exploitable via ``RGBA``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-59198 |
|
Out-of-Bounds Read in Pillow (CVE-2026-59198)
vulnerability in Pillow (CVE-2026-59198). Confidential information can be exposed externally. Exploitable via ``tga_rle``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-55380 |
|
Vulnerability in pillow (CVE-2026-55380)
vulnerability in pillow (CVE-2026-55380). Risk of unauthorized operations or information disclosure. Exploitable via ``self._size``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-55798 |
|
OS Command Injection in Pillow (CVE-2026-55798)
OS command injection in Pillow (CVE-2026-55798). Risk of unauthorized operations or information disclosure. Exploitable via ``cmd.exe``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-55379 |
|
Vulnerability in pillow (CVE-2026-55379)
vulnerability in pillow (CVE-2026-55379). Risk of unauthorized operations or information disclosure. Exploitable via ``DecompressionBombError``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-54060 |
|
Vulnerability in pillow (CVE-2026-54060)
vulnerability in pillow (CVE-2026-54060). Risk of unauthorized operations or information disclosure. Exploitable via ``BdfFontFile``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-54059 |
|
Vulnerability in pillow (CVE-2026-54059)
vulnerability in pillow (CVE-2026-54059). Risk of unauthorized operations or information disclosure. Exploitable via ``METRICS``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-42311 |
|
Vulnerability in pillow (CVE-2026-42311)
vulnerability in pillow (CVE-2026-42311). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-42310 |
|
Vulnerability in pillow (CVE-2026-42310)
vulnerability in pillow (CVE-2026-42310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-42309 |
|
Vulnerability in pillow (CVE-2026-42309)
vulnerability in pillow (CVE-2026-42309). Risk of unauthorized operations or information disclosure. Exploitable via ``ImagePath.Path``. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-42308 |
|
Vulnerability in pillow (CVE-2026-42308)
vulnerability in pillow (CVE-2026-42308). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-40192 |
|
Vulnerability in pillow (CVE-2026-40192)
vulnerability in pillow (CVE-2026-40192). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-25990 |
|
Out-of-Bounds Write in pillow (CVE-2026-25990)
out-of-bounds write in pillow (CVE-2026-25990). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.1.1` or later.
|
| CVE-2016-3076 |
|
Buffer Overflow in pillow (CVE-2016-3076)
vulnerability in pillow (CVE-2016-3076). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.2` or later.
|