Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: pillow Clear
ID Title
CVE-2026-59200 Vulnerability in Pillow (CVE-2026-59200)
vulnerability in Pillow (CVE-2026-59200). Risk of unauthorized operations or information disclosure. Exploitable via ``PdfParser.py``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59197 Vulnerability in Pillow (CVE-2026-59197)
vulnerability in Pillow (CVE-2026-59197). Risk of unauthorized operations or information disclosure. Exploitable via ``INT_MAX``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-54058 Out-of-Bounds Read in pillow (CVE-2026-54058)
vulnerability in pillow (CVE-2026-54058). Confidential information can be exposed externally. Exploitable via ``raw``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59205 Out-of-Bounds Write in pillow (CVE-2026-59205)
out-of-bounds write in pillow (CVE-2026-59205). Risk of unauthorized operations or information disclosure. Exploitable via ``imOut``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59204 Vulnerability in pillow (CVE-2026-59204)
vulnerability in pillow (CVE-2026-59204). Risk of unauthorized operations or information disclosure. Exploitable via ``total_component_width``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59203 Vulnerability in pillow (CVE-2026-59203)
vulnerability in pillow (CVE-2026-59203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59199 Vulnerability in Pillow (CVE-2026-59199)
vulnerability in Pillow (CVE-2026-59199). Risk of unauthorized operations or information disclosure. Exploitable via ``RGBA``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59198 Out-of-Bounds Read in Pillow (CVE-2026-59198)
vulnerability in Pillow (CVE-2026-59198). Confidential information can be exposed externally. Exploitable via ``tga_rle``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-55380 Vulnerability in pillow (CVE-2026-55380)
vulnerability in pillow (CVE-2026-55380). Risk of unauthorized operations or information disclosure. Exploitable via ``self._size``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-55798 OS Command Injection in Pillow (CVE-2026-55798)
OS command injection in Pillow (CVE-2026-55798). Risk of unauthorized operations or information disclosure. Exploitable via ``cmd.exe``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-55379 Vulnerability in pillow (CVE-2026-55379)
vulnerability in pillow (CVE-2026-55379). Risk of unauthorized operations or information disclosure. Exploitable via ``DecompressionBombError``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-54060 Vulnerability in pillow (CVE-2026-54060)
vulnerability in pillow (CVE-2026-54060). Risk of unauthorized operations or information disclosure. Exploitable via ``BdfFontFile``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-54059 Vulnerability in pillow (CVE-2026-54059)
vulnerability in pillow (CVE-2026-54059). Risk of unauthorized operations or information disclosure. Exploitable via ``METRICS``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-42311 Vulnerability in pillow (CVE-2026-42311)
vulnerability in pillow (CVE-2026-42311). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `12.2.0` or later.
CVE-2026-42310 Vulnerability in pillow (CVE-2026-42310)
vulnerability in pillow (CVE-2026-42310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
CVE-2026-42309 Vulnerability in pillow (CVE-2026-42309)
vulnerability in pillow (CVE-2026-42309). Risk of unauthorized operations or information disclosure. Exploitable via ``ImagePath.Path``. Mitigation: upgrade to `12.2.0` or later.
CVE-2026-42308 Vulnerability in pillow (CVE-2026-42308)
vulnerability in pillow (CVE-2026-42308). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
CVE-2026-40192 Vulnerability in pillow (CVE-2026-40192)
vulnerability in pillow (CVE-2026-40192). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
CVE-2026-25990 Out-of-Bounds Write in pillow (CVE-2026-25990)
out-of-bounds write in pillow (CVE-2026-25990). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.1.1` or later.
CVE-2016-3076 Buffer Overflow in pillow (CVE-2016-3076)
vulnerability in pillow (CVE-2016-3076). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.2` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →