CLSA-2026-1787306626 TuxCare security update for pillow (2 CVEs)

🗓️ 21 Aug 2026 10:03:46Reported by GoogleType

osv🔗 osv.dev👁 13 Views

TuxCare rebuilt pillow to fix 2 CVEs, fixed in 9.4.0.post5+tuxcare.

Reporter	Title	Published	Views	Family All 314
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205	29 Sep 202614:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps	26 Aug 202613:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for July 2026	31 Jul 202611:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM watsonx.governance, IBM AI Factsheets, and IBM Watson OpenScale	29 Sep 202607:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Pillow affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	31 Aug 202615:32	–	ibm
attackerkb	CVE-2026-54058	14 Jul 202616:27	–	attackerkb
attackerkb	CVE-2026-54060	6 Jul 202618:49	–	attackerkb

21 Aug 2026 12:45Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5 - 9.1

CVSS 48.3

EPSS0.0068

SSVC

pillow TuxCare security update library rebuilt