Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1793
  • PyPI/pillow
Pillow buffer overflow vulnerability 5 days ago
  • Fix available
  • Severity - 7.3 (High)
PYSEC-2026-1794
  • PyPI/pillow
libwebp: OOB write in BuildHuffmanTable 5 days ago
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-457
  • PyPI/pillow
Arbitrary Code Execution in Pillow 29 Jun
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2026-165
  • PyPI/pillow
See record for full details 09 May
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-pwv6-vv43-88gr
  • PyPI/pillow
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow) 04 May
  • Fix available
  • Severity - 8.6 (High)
GHSA-r73j-pqj5-w3x7
  • PyPI/pillow
Pillow has a PDF Parsing Trailer Infinite Loop (DoS) 04 May
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-wjx4-4jcj-g98j
  • PyPI/pillow
Pillow has an integer overflow when processing fonts 04 May
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-5xmw-vc9v-4wf2
  • PyPI/pillow
Pillow has a heap buffer overflow with nested list coordinates 04 May
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-whj4-6x5x-4v2j
  • PyPI/pillow
FITS GZIP decompression bomb in Pillow 13 Apr
  • Fix available
  • Severity - 8.7 (High)
GHSA-cfh3-3jmp-rvhc
  • PyPI/pillow
Pillow affected by out-of-bounds write when loading PSD images 11 Feb
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2025-61
  • PyPI/pillow
  • github.com/python-pillow/pillow
See record for full details 01 Jul 2025
  • Fix available
GHSA-xg8h-j46f-w952
  • PyPI/pillow
Pillow vulnerability can cause write buffer overflow on BCn encoding 01 Jul 2025
  • Fix available
  • Severity - 7.1 (High)
GHSA-44wm-f244-xhp3
  • PyPI/pillow
Pillow buffer overflow vulnerability 03 Apr 2024
  • Fix available
  • Severity - 7.3 (High)
GHSA-3f63-hfp8-52jq
  • PyPI/pillow
Arbitrary Code Execution in Pillow 19 Jan 2024
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-8ghj-p4vj-mr35
  • PyPI/pillow
Pillow Denial of Service vulnerability 03 Nov 2023
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2023-227
  • PyPI/pillow
  • github.com/python-pillow/pillow
See record for full details 03 Nov 2023
  • Fix available