CVE-2026-96642

The Pillow Python imaging library is vulnerable to an infinite CPU-spin loop in the TarIO initializer (located in src/PIL/TarIO.py) in versions prior to 13.0.0 . The root cause is the acceptance of a negative octal member size , which triggers a backward seek that returns to the same 512-byte hea...