{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "python-pillow Pillow on Wolfi: fixes",
 "home_page_url": "https://patchwire.jonathanross.dev/products/python-pillow--pillow/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/python-pillow--pillow/wolfi.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112901/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112901/",
   "title": "CVE-2026-112901 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T22:09:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112900/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112900/",
   "title": "CVE-2026-112900 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T22:07:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112898/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112898/",
   "title": "CVE-2026-112898 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T22:04:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112897/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112897/",
   "title": "CVE-2026-112897 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 7 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21.",
   "date_published": "2026-10-19T22:00:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112896/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112896/",
   "title": "CVE-2026-112896 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:59:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112895/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112895/",
   "title": "CVE-2026-112895 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:57:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112894/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112894/",
   "title": "CVE-2026-112894 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:55:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112893/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112893/",
   "title": "CVE-2026-112893 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:53:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112892/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112892/",
   "title": "CVE-2026-112892 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112891/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112891/",
   "title": "CVE-2026-112891 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:33:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112406/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112406/",
   "title": "CVE-2026-112406 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:31:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112405/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112405/",
   "title": "CVE-2026-112405 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:29:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112404/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112404/",
   "title": "CVE-2026-112404 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 7 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21.",
   "date_published": "2026-10-19T21:27:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112403/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112403/",
   "title": "CVE-2026-112403 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:22:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112402/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112402/",
   "title": "CVE-2026-112402 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:18:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112397/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112397/",
   "title": "CVE-2026-112397 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:17:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112392/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112392/",
   "title": "CVE-2026-112392 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:17:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112401/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112401/",
   "title": "CVE-2026-112401 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:15:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112400/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112400/",
   "title": "CVE-2026-112400 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 8 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21, superset-6.1 6.1.0-r16.",
   "date_published": "2026-10-19T21:12:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112399/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112399/",
   "title": "CVE-2026-112399 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:10:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112396/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112396/",
   "title": "CVE-2026-112396 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T21:02:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112395/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112395/",
   "title": "CVE-2026-112395 · python-pillow Pillow · fixed in Wolfi (gftools 0.10.4-r1 and 7 more)",
   "content_text": "Fixed versions: gftools 0.10.4-r1, kserve-storage-controller 0.21.0-r9, kubeflow-pipelines-visualization-server 2.17.2-r7, open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0, superset-6.0 6.0.0-r21.",
   "date_published": "2026-10-19T20:59:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112394/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112394/",
   "title": "CVE-2026-112394 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T20:48:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112393/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112393/",
   "title": "CVE-2026-112393 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T20:46:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112391/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112391/",
   "title": "CVE-2026-112391 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T20:40:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112390/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112390/",
   "title": "CVE-2026-112390 · python-pillow Pillow · fixed in Wolfi (open-webui 0.12.3-r6 and 3 more)",
   "content_text": "Fixed versions: open-webui 0.12.3-r6, py3.11-pillow 13.0.0-r0, py3.12-pillow 13.0.0-r0, py3.13-pillow 13.0.0-r0.",
   "date_published": "2026-10-19T20:35:39Z"
  }
 ]
}