pillow vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-112405Highpillow: Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0CVE-2026-112893Highpillow: Pillow: Invalid free in FreeType glyph rendering when a stroker is activeCVE-2026-112402HighPillow: Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transformCVE-2026-112394MediumPillow: Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer sizeCVE-2026-112900CriticalPillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCECVE-2026-112397HighPillow: Pillow: Out-of-bounds access in _imagingmorph on a zero-width imageCVE-2026-112400HighPillow: Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoSCVE-2026-112899MediumPillow: Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limitCVE-2026-112897HighPillow: Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG stripsCVE-2026-112896HighPillow: Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readCVE-2026-112895Highpillow: Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)CVE-2026-112395Mediumpillow: Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)CVE-2026-112404HighPillow: Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsCVE-2026-112403CriticalPillow: Pillow: Heap buffer overflow in ImagingJpegDecodeCVE-2026-59205Highpillow: Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatchCVE-2026-59204Highpillow: Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of serviceCVE-2026-59203Mediumpillow: Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of serviceCVE-2026-59200HighPillow: Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()CVE-2026-59199HighPillow: Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflowCVE-2026-59198MediumPillow: Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated imagesCVE-2026-59197HighPillow: Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`CVE-2026-55798MediumPillow: Pillow: WindowsViewer.get_command() OS command injection via unescaped shell pathCVE-2026-55380Highpillow: Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`CVE-2026-55379Highpillow: Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loadingCVE-2026-54060Highpillow: Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo