Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54059 |
|
Vulnerability in pillow (CVE-2026-54059)
vulnerability in pillow (CVE-2026-54059). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54060 |
|
Vulnerability in pillow (CVE-2026-54060)
vulnerability in pillow (CVE-2026-54060). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55379 |
|
Vulnerability in pillow (CVE-2026-55379)
vulnerability in pillow (CVE-2026-55379). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55380 |
|
Vulnerability in c (CVE-2026-55380)
vulnerability in c (CVE-2026-55380). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55798 |
|
OS Command Injection in pillow (CVE-2026-55798)
OS command injection in pillow (CVE-2026-55798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42309 |
|
Vulnerability in pillow (CVE-2026-42309)
vulnerability in pillow (CVE-2026-42309). Risk of unauthorized operations or information disclosure. Exploitable via ``ImagePath.Path``. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-42310 |
|
Vulnerability in pillow (CVE-2026-42310)
vulnerability in pillow (CVE-2026-42310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-42311 |
|
Vulnerability in pillow (CVE-2026-42311)
vulnerability in pillow (CVE-2026-42311). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-42308 |
|
Vulnerability in pillow (CVE-2026-42308)
vulnerability in pillow (CVE-2026-42308). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-40192 |
|
Vulnerability in pillow (CVE-2026-40192)
vulnerability in pillow (CVE-2026-40192). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2026-25990 |
|
Out-of-Bounds Write in pillow (CVE-2026-25990)
out-of-bounds write in pillow (CVE-2026-25990). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.1.1` or later.
|
| CVE-2016-3076 |
|
Buffer Overflow in pillow (CVE-2016-3076)
vulnerability in pillow (CVE-2016-3076). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.2` or later.
|