{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "python-pillow Pillow on Chainguard: fixes",
 "home_page_url": "https://patchwire.jonathanross.dev/products/python-pillow--pillow/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/python-pillow--pillow/chainguard.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96639/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96639/",
   "title": "CVE-2026-96639 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T21:06:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96636/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96636/",
   "title": "CVE-2026-96636 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T21:05:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96640/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96640/",
   "title": "CVE-2026-96640 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T21:03:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96637/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96637/",
   "title": "CVE-2026-96637 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T21:01:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96778/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96778/",
   "title": "CVE-2026-96778 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:58:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96643/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96643/",
   "title": "CVE-2026-96643 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96644/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96644/",
   "title": "CVE-2026-96644 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96641/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96641/",
   "title": "CVE-2026-96641 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:51:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96642/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96642/",
   "title": "CVE-2026-96642 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:49:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96638/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96638/",
   "title": "CVE-2026-96638 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:47:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112901/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112901/",
   "title": "CVE-2026-112901 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T22:09:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112900/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112900/",
   "title": "CVE-2026-112900 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T22:07:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112898/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112898/",
   "title": "CVE-2026-112898 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T22:04:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112897/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112897/",
   "title": "CVE-2026-112897 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 33 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T22:00:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112896/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112896/",
   "title": "CVE-2026-112896 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 35 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:59:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112895/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112895/",
   "title": "CVE-2026-112895 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 35 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox-fips 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:57:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112894/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112894/",
   "title": "CVE-2026-112894 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:55:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112893/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112893/",
   "title": "CVE-2026-112893 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:53:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112892/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112892/",
   "title": "CVE-2026-112892 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112891/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112891/",
   "title": "CVE-2026-112891 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:33:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112406/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112406/",
   "title": "CVE-2026-112406 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:31:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112405/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112405/",
   "title": "CVE-2026-112405 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:29:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112404/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112404/",
   "title": "CVE-2026-112404 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 34 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox-fips 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:27:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112403/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112403/",
   "title": "CVE-2026-112403 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 35 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:22:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112402/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112402/",
   "title": "CVE-2026-112402 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:18:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112397/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112397/",
   "title": "CVE-2026-112397 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 34 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:17:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112392/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112392/",
   "title": "CVE-2026-112392 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:17:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112401/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112401/",
   "title": "CVE-2026-112401 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:15:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112400/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112400/",
   "title": "CVE-2026-112400 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 34 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:12:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112399/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112399/",
   "title": "CVE-2026-112399 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:10:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112396/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112396/",
   "title": "CVE-2026-112396 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:02:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112395/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112395/",
   "title": "CVE-2026-112395 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 33 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T20:59:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112394/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112394/",
   "title": "CVE-2026-112394 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T20:48:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112393/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112393/",
   "title": "CVE-2026-112393 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T20:46:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112391/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112391/",
   "title": "CVE-2026-112391 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T20:40:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112390/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112390/",
   "title": "CVE-2026-112390 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T20:35:39Z"
  }
 ]
}