{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "python-pillow Pillow: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/python-pillow--pillow/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/python-pillow--pillow/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96639/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96639/",
   "title": "CVE-2026-96639 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the stale native storage because _im is non-null without verifying that its mode and size still match. Crafted PSD, MPO, DCX, or MIC frame transitions can then write wider pixels into the narrow allocation, causing native out-of-bounds writes and crashes. The MPO path can also cause a native over-read and, in demonstrated runtime-specific profiles, command execution. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-21T21:06:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96639/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96639/",
   "title": "CVE-2026-96639 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T21:06:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96639/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96639/",
   "title": "CVE-2026-96639 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-21T21:06:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96640/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96640/",
   "title": "CVE-2026-96640 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format=\"PDF\", append=True) processes an attacker-controlled existing PDF whose /Kids arrays repeatedly reference the same child /Pages node, Pillow expands the shared subtree as distinct pages. A compact malformed PDF can therefore create exponentially many page references and consume disproportionate CPU before the append completes. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-21T21:03:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96640/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96640/",
   "title": "CVE-2026-96640 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T21:03:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96640/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96640/",
   "title": "CVE-2026-96640 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-2.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-2.1.",
   "date_published": "2026-10-21T21:03:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96640/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96640/",
   "title": "CVE-2026-96640 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-21T21:03:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96637/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96637/",
   "title": "CVE-2026-96637 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can use a safe first frame to pass Image.open() and then declare very large dimensions in a later mode F frame. Loading that frame allocates approximately four bytes per attacker-declared pixel and can consume multiple gigabytes of memory. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-21T21:01:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96637/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96637/",
   "title": "CVE-2026-96637 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T21:01:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96637/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96637/",
   "title": "CVE-2026-96637 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-21T21:01:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96778/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96778/",
   "title": "CVE-2026-96778 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent compressed image data to overwrite adjacent heap memory. Re-saving an untrusted image as JPEG while preserving its ICC profile and forwarded comment can crash the process and may enable code execution in suitable runtime and heap layouts. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-21T20:58:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96778/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96778/",
   "title": "CVE-2026-96778 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:58:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96778/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96778/",
   "title": "CVE-2026-96778 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-2.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-2.1.",
   "date_published": "2026-10-21T20:58:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96778/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96778/",
   "title": "CVE-2026-96778 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-21T20:58:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96643/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96643/",
   "title": "CVE-2026-96643 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new shrinking copy on every iteration and quadratic CPU work. The condition is reachable through Image.getexif(), Image._getexif(), and ImageOps.exif_transpose(), including common photo-upload rotation workflows. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96643/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96643/",
   "title": "CVE-2026-96643 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96643/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96643/",
   "title": "CVE-2026-96643 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96644/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96644/",
   "title": "CVE-2026-96644 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using the original full dimensions. A crafted wide, short metafile can pass the pixel-count decompression-bomb check and make the Windows-only renderer read beyond the heap buffer, potentially disclosing memory or crashing the process. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-21T20:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96644/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96644/",
   "title": "CVE-2026-96644 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96644/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96644/",
   "title": "CVE-2026-96644 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-21T20:54:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96642/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96642/",
   "title": "CVE-2026-96642 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads that header, consumes a full CPU core, and never returns. TarIO is reached only when an application directly uses PIL.TarIO.TarIO rather than the default Image.open() path. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-21T20:49:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96642/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96642/",
   "title": "CVE-2026-96642 · python-pillow Pillow · fixed in Chainguard (nemo-gym 0.5.0_rc0_git20260729-r6 and 10 more)",
   "content_text": "Fixed versions: nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-21T20:49:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96642/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96642/",
   "title": "CVE-2026-96642 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-2.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-2.1.",
   "date_published": "2026-10-21T20:49:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96642/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96642/",
   "title": "CVE-2026-96642 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-21T20:49:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112900/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112900/",
   "title": "CVE-2026-112900 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T22:07:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112900/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112900/",
   "title": "CVE-2026-112900 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T22:07:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112900/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112900/",
   "title": "CVE-2026-112900 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T22:07:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112900/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112900/",
   "title": "CVE-2026-112900 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T22:07:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112900/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112900/",
   "title": "CVE-2026-112900 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T22:07:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112897/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112897/",
   "title": "CVE-2026-112897 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow converts the expected rows without clearing the unwritten tail. The tile path is affected from 5.3.0 and the strip path from 6.0.0. An attacker can supply a crafted TIFF to an application that loads and returns or re-encodes its pixels. This can disclose stale heap contents without memory corruption or a process crash. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T22:00:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112897/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112897/",
   "title": "CVE-2026-112897 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 33 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T22:00:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112897/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112897/",
   "title": "CVE-2026-112897 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T22:00:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112897/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112897/",
   "title": "CVE-2026-112897 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 7 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21.",
   "date_published": "2026-10-19T22:00:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112896/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112896/",
   "title": "CVE-2026-112896 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved. An application that re-encodes the attacker's TIFF with libtiff can trigger the out-of-bounds read. This can disclose heap memory in the output or crash the process. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:59:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112896/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112896/",
   "title": "CVE-2026-112896 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 35 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:59:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112896/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112896/",
   "title": "CVE-2026-112896 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:59:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112896/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112896/",
   "title": "CVE-2026-112896 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:59:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112896/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112896/",
   "title": "CVE-2026-112896 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:59:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112895/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112895/",
   "title": "CVE-2026-112895 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact repeated-offset guard, so deep or cyclic page trees and long chains of unique trailer offsets can exhaust the Python stack. Repeated non-cyclic /Kids references can also cause super-linear CPU and memory use. An attacker can supply such a PDF to an application that calls Image.save with PDF append enabled. This can raise an uncaught RecursionError or consume excessive CPU and memory before output is written, causing denial of service. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:57:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112895/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112895/",
   "title": "CVE-2026-112895 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 35 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox-fips 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:57:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112895/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112895/",
   "title": "CVE-2026-112895 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:57:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112895/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112895/",
   "title": "CVE-2026-112895 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:57:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112894/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112894/",
   "title": "CVE-2026-112894 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can supply a multi-frame image, including a small APNG with a large declared frame count, to an application that converts it to a multipage PDF. This can consume excessive CPU and deny service. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:55:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112894/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112894/",
   "title": "CVE-2026-112894 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:55:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112894/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112894/",
   "title": "CVE-2026-112894 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:55:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112894/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112894/",
   "title": "CVE-2026-112894 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:55:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112894/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112894/",
   "title": "CVE-2026-112894 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:55:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112893/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112893/",
   "title": "CVE-2026-112893 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:53:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112893/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112893/",
   "title": "CVE-2026-112893 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:53:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112893/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112893/",
   "title": "CVE-2026-112893 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:53:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112893/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112893/",
   "title": "CVE-2026-112893 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:53:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112892/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112892/",
   "title": "CVE-2026-112892 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafted MSP image to an application that loads its pixels. This can exhaust memory and deny service even when the declared pixel count passes the decompression-bomb check. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112892/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112892/",
   "title": "CVE-2026-112892 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112892/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112892/",
   "title": "CVE-2026-112892 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112892/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112892/",
   "title": "CVE-2026-112892 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112892/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112892/",
   "title": "CVE-2026-112892 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112406/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112406/",
   "title": "CVE-2026-112406 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows Parent relationships without detecting a cycle in the page tree. An attacker can supply a cyclic PDF to an application that appends an image to that PDF. This can hold the worker at full CPU and deny service. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:31:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112406/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112406/",
   "title": "CVE-2026-112406 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:31:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112406/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112406/",
   "title": "CVE-2026-112406 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:31:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112406/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112406/",
   "title": "CVE-2026-112406 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:31:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112406/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112406/",
   "title": "CVE-2026-112406 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:31:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112405/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112405/",
   "title": "CVE-2026-112405 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bit integer or floating-point image backed by image32 storage to be merged as a narrower multiband image. A crafted IPTC file can reach this path when an application opens and loads it, or a caller can invoke Image.merge() directly with such a first band. This causes a native process crash. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:29:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112405/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112405/",
   "title": "CVE-2026-112405 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:29:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112405/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112405/",
   "title": "CVE-2026-112405 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:29:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112405/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112405/",
   "title": "CVE-2026-112405 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:29:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112404/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112404/",
   "title": "CVE-2026-112404 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently, Pillow does not verify that the required input row fits inside the row libtiff produced, while the strip path has this validation. Loading pixels from such a crafted TIFF can expose adjacent heap data in output pixels or crash the process. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:27:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112404/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112404/",
   "title": "CVE-2026-112404 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 34 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox-fips 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:27:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112404/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112404/",
   "title": "CVE-2026-112404 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:27:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112404/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112404/",
   "title": "CVE-2026-112404 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:27:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112404/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112404/",
   "title": "CVE-2026-112404 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 7 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21.",
   "date_published": "2026-10-19T21:27:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112403/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112403/",
   "title": "CVE-2026-112403 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:22:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112403/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112403/",
   "title": "CVE-2026-112403 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 35 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, netbox 4.7.3-r1, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:22:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112403/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112403/",
   "title": "CVE-2026-112403 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:22:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112403/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112403/",
   "title": "CVE-2026-112403 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:22:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112402/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112402/",
   "title": "CVE-2026-112402 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling. The output image allocation must succeed while the additional per-column lookup allocation fails, after which the error path deletes image storage that later cleanup releases again. An attacker who can drive such a large Image.transform() operation under memory pressure may trigger the failure. This can crash the process and may corrupt memory. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:18:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112402/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112402/",
   "title": "CVE-2026-112402 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:18:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112402/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112402/",
   "title": "CVE-2026-112402 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:18:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112402/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112402/",
   "title": "CVE-2026-112402 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:18:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112402/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112402/",
   "title": "CVE-2026-112402 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:18:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112397/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112397/",
   "title": "CVE-2026-112397 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. An attacker can supply such an image to an application that applies a morphology operation. This can crash the process. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:17:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112397/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112397/",
   "title": "CVE-2026-112397 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 34 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:17:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112397/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112397/",
   "title": "CVE-2026-112397 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:17:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112397/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112397/",
   "title": "CVE-2026-112397 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:17:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112392/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112392/",
   "title": "CVE-2026-112392 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached. An attacker can supply or cause creation of a zero-size image to an application that applies a rank, median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:17:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112392/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112392/",
   "title": "CVE-2026-112392 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:17:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112392/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112392/",
   "title": "CVE-2026-112392 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:17:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112392/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112392/",
   "title": "CVE-2026-112392 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:17:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112392/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112392/",
   "title": "CVE-2026-112392 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:17:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112400/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112400/",
   "title": "CVE-2026-112400 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches that exception and continues processing the same image object, later seek or load operations allocate according to those dimensions and can exhaust memory, denying service. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:12:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112400/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112400/",
   "title": "CVE-2026-112400 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.11-sdk 2.77.0-r2 and 34 more)",
   "content_text": "Fixed versions: apache-beam-python-3.11-sdk 2.77.0-r2, apache-beam-python-3.12-sdk 2.77.0-r5, apache-beam-python-3.13-sdk 2.77.0-r5, apache-beam-python-3.14-sdk 2.77.0-r5, gftools 0.10.4-r1, jupyter-all-spark-notebook 7.6.1_git20261016-r1, kserve-storage-controller 0.21.0-r9, kserve-xgbserver 0.21.0-r3, kubeflow-pipelines-visualization-server 2.17.2-r7, label-studio 1.23.2-r2, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, openstack-horizon-2025.2-fips 25.5.2_git20260914-r10, openstack-horizon-2026.1-fips 25.7.3_git20261019-r1, pgadmin4 9.18-r6, pgadmin4-fips 9.18-r8, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-5.0 5.0.0-r45, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16, superset-fips-6.1 6.1.0-r11, tensorflow-cpu-jupyter 2.21.0-r13, tensorflow-gpu-jupyter 2.21.0-r13.",
   "date_published": "2026-10-19T21:12:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112400/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112400/",
   "title": "CVE-2026-112400 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:12:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112400/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112400/",
   "title": "CVE-2026-112400 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:12:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112400/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112400/",
   "title": "CVE-2026-112400 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:12:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112399/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112399/",
   "title": "CVE-2026-112399 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS reaches PngImageFile._seek while Image.open() positions frame zero. The full-canvas allocation occurs inside Image.open() without requiring pixel loading or frame iteration. This can exhaust memory and deny service. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:10:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112399/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112399/",
   "title": "CVE-2026-112399 · python-pillow Pillow · fixed in Chainguard (apache-beam-python-3.12-sdk 2.77.0-r5 and 16 more)",
   "content_text": "Fixed versions: apache-beam-python-3.12-sdk 2.77.0-r5, nemo-gym 0.5.0_rc0_git20260729-r6, nemo-rl-cuda-13.0 0.7.0-r11, nemo-rl-cuda-13.0-automodel 0.7.0-r11, nemo-rl-cuda-13.0-mcore 0.7.0-r11, nemo-rl-cuda-13.0-sglang 0.7.0-r11, nemo-rl-cuda-13.0-vllm 0.7.0-r11, open-webui 0.12.3-r6, openstack-horizon-2025.2 25.5.2_git20260914-r12, py3.11-pillow 13.0.0-r0, py3.11-pytorch-cuda-13.0 2.14.1-r2, py3.12-pillow 13.0.0-r0, py3.12-pytorch-cuda-13.0 2.14.1-r2, py3.13-pillow 13.0.0-r0, py3.13-pytorch-cuda-13.0 2.14.1-r2, py3.14-pytorch-cuda-13.0 2.14.1-r2, superset-fips-6.1 6.1.0-r11.",
   "date_published": "2026-10-19T21:10:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112399/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112399/",
   "title": "CVE-2026-112399 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:10:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112399/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112399/",
   "title": "CVE-2026-112399 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:10:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112398/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112398/",
   "title": "CVE-2026-112398 · python-pillow Pillow · disclosed",
   "content_text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four components, causing ImagingJpegDecode to write four-component scanlines into the two-byte tile buffer. An attacker can supply a crafted OLE2 FlashPix file to an application with the optional olefile dependency installed that opens or thumbnails untrusted input. This can corrupt heap memory and may allow arbitrary code execution. This issue is fixed in version 13.0.0.",
   "date_published": "2026-10-19T21:07:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112398/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112398/",
   "title": "CVE-2026-112398 · python-pillow Pillow · fixed in openSUSE Tumbleweed (python-Pillow 13.0.0-1.1)",
   "content_text": "Fixed versions: python-Pillow 13.0.0-1.1.",
   "date_published": "2026-10-19T21:07:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112398/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112398/",
   "title": "CVE-2026-112398 · python-pillow Pillow · fixed upstream (PyPI)",
   "content_text": "Fixed versions: pillow 13.0.0.",
   "date_published": "2026-10-19T21:07:25Z"
  }
 ]
}