Known Vulnerabilities for Pillow by Python-pillow
Listed below are 10 of the newest known vulnerabilities associated with "Pillow" by "Python-pillow".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-55798 json | Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by direc... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-55380 json | Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-55379 json | Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-54060 json | Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a com... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-54059 json | Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF ME... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-42311 json | Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead ... | Not Provided | 2026-05-09 | 2026-05-12 |
| CVE-2026-42310 json | Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that ... | Not Provided | 2026-05-09 | 2026-05-09 |
| CVE-2026-42309 json | Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs... | Not Provided | 2026-05-09 | 2026-05-11 |
| CVE-2026-42308 json | Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, ... | Not Provided | 2026-05-09 | 2026-05-11 |
| CVE-2026-40192 json | Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when... | Not Provided | 2026-04-15 | 2026-07-10 |