CLSA-2026-1793270155

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1793270155.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1793270155
Upstream
CVE (2)
Published
2026-10-29T10:35:55Z
Modified
2026-10-29T13:45:04Z
Summary
TuxCare security update for pillow (2 CVEs)
Details

TuxCare rebuilt pillow to address 2 CVEs. Fixed in 8.4.0.post12+tuxcare.

Affected packages

TuxCare:PyPI / pillow

Package

Name
pillow
Purl
pkg:pypi/pillow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.4.0
Fixed
8.4.0.post12+tuxcare

Affected versions

8.*
8.4.0
8.4.0.post1+tuxcare
8.4.0.post2+tuxcare
8.4.0.post3+tuxcare
8.4.0.post4+tuxcare
8.4.0.post5+tuxcare
8.4.0.post6+tuxcare
8.4.0.post7+tuxcare
8.4.0.post8+tuxcare
8.4.0.post9+tuxcare
8.4.0.post10+tuxcare
8.4.0.post11+tuxcare

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1793270155.json"
tuxcare 
{
    "base_version":  "8.4.0",
    "fixed_version":  "8.4.0.post12+tuxcare"
}