ROOT-APP-PYPI-CVE-2026-59205 CVE-2026-59205 in pillow - Patched by Root

Root has patched CVE-2026-59205 in the pillow package for Root:PyPI. Multiple fixed versions available...

SUSE SLED15 / SLES15 Security Update : python-Pillow (SUSE-SU-2026:3268-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3268-1 advisory. - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. -...

CVE-2026-59205 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, mlflow, label-studio, openstack-horizon-2026.1, superset, open-webui, superset-fips, tritonserver-backend-vllm-cuda-13.0, tensorflow-gpu-jupyter, openstack-horizon-2026.1-fips,...

CVE-2026-59205

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:08+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6 2026-07-21 06:31:17+00:00| seen| https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724...

3deecelltracker (>=0.5.1a0, <=0.5.2a0), adversarial-attacks-white-black-box (0.1.7) +200 more potentially affected by CVE-2026-59205 via pillow (9.3.0)

pillow PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker =0.5.1a0, =1.5.0rc1, =0.0.3, =22.11.2, =2.6.17, =0.1.0a0, =0.1.0, =0.0.1a1, =0.3.1rc5, =0.8.0, =22.43.1, =22.52.1 and more Source...

2dify (1.0.1), 3deecelltracker (1.0.1) +2381 more potentially affected by CVE-2026-59205 via pillow (11.3.0)

pillow PYPI version 11.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2dify 1.0.1 - 3deecelltracker 1.0.1 - aaa-ml-datasets-course 1.0.0 - aaanalysis =1.0.1, =1.0.0, =0.2.0a0, =0.1.32, =0.0.29, =2.6.7, =0.1.3, =0.1.0,...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), 2022-2-gces-ifpf (0.3.0) +1333 more potentially affected by CVE-2026-59205 via pillow (9.5.0)

pillow PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 170051277-trab-final-gces =0.3.0, =0.1.0, =0.1.0, =2.0.1, =0.1.4, =1.2.5, =0.1.0, =1.2.0, =1.10.3, =0.61.9b59, =1.3.1 and more Source cves:...

alphad3m (>=0.10.0.dev0, <=0.10.0.dev1), amazoncaptcha (>=0.0.9, <=0.3.9) +55 more potentially affected by CVE-2026-59205 via pillow (7.1.2)

pillow PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - alphad3m =0.10.0.dev0, =0.0.9, =0.0.1, =1.2.0, =0.1.3, =2.0.0rc1, =0.0.1, =1.2.4, =0.1.0, =0.3.1, =0.0.1, =0.1.4, =2022.1.5, =2022.5.26 and more...

aioload (0.4.0), amazoncaptcha (0.5.0) +68 more potentially affected by CVE-2026-59205 via pillow (8.0.1)

pillow PYPI version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aioload 0.4.0 - amazoncaptcha 0.5.0 - apricopt =0.0.1a1.dev5, =0.1.0, =0.1.7, =0.1.3, =1.37.0, =1.38.1 - blendedux 0.0.2 and more Source cves:...

aug (0.1.0), chromewhip (>=0.3.0, <=0.3.4) +85 more potentially affected by CVE-2026-59205 via pillow (6.0.0)

pillow PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aug 0.1.0 - chromewhip =0.3.0, =1.0.2, =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =0.0.1, =3.7.0a4, =0.3.7, =0.0.1, =2.3.0.18070322,...

agkit (>=0.17.0, <=0.26.0), ai-puti (0.1.0b5) +237 more potentially affected by CVE-2026-59205 via pillow (11.1.0)

pillow PYPI version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - agkit =0.17.0, =0.2.0, =0.1.0, =0.76.0, =0.1.1, =3.1.8, =0.1.0, =0.1.0, =0.5.0, =25.2.0, =1.0.4, =0.1.0, =0.1.12 - arched-emailer 0.4.6 and more...

sphinxmark (0.1.15) potentially affected by CVE-2026-59205 via pillow (3.4.1)

pillow PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - sphinxmark 0.1.15 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...

3deecelltracker (0.5.0a0), aima (2023.2.4) +60 more potentially affected by CVE-2026-59205 via pillow (9.1.0)

pillow PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker 0.5.0a0 - aima 2023.2.4 - an-website =22.5.13, =2.4.5, =0.2.4rc1, =22.14.1, =0.0.3, =1.0.1, =0.1.0, =0.0.36, =0.0.39 and more Source...

brython-server (>=2.0.3, <=2.2.1), cimage (>=1.4.1, <=1.4.2) +7 more potentially affected by CVE-2026-59205 via pillow (2.9.0)

pillow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - brython-server =2.0.3, =1.4.1, =0.0.1, =1.0.7, =0.6.1, =0.1.1, =0.5.28, =0.0.1.dev0, =1.0.0b1 Source cves: CVE-2026-59205 Source advisory:...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 3lc (>=2.12.0, <=2.22.0) +2453 more potentially affected by CVE-2026-59205 via pillow (10.4.0)

pillow PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 11x-wagtail-blog =0.0.0, =2.12.0, =0.1.0, =0.1.3, =0.3.0, =0.1.3, =0.1.0, =0.1.4, =0.3.0, =0.2.1, =0.2.0, =0.0.1, =0.0.0, =0.0.9 and more Source...

aichatbot (0.0.1), aiqc (>=2.1.0, <=7.1.5) +53 more potentially affected by CVE-2026-59205 via pillow (8.1.2)

pillow PYPI version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aichatbot 0.0.1 - aiqc =2.1.0, =0.0.2, =0.0.1, =0.14.0, =0.14.0, =0.0.0a1, =2.0.1, =0.2.0, =0.0.2, =3.0.8rc6, =3.0.8rc7 - django-image-assets 0.2.0...

aamutils (>=0.0.1, <=0.0.10), aau-gomapedge-etl (>=0.3.2, <=0.4.1) +326 more potentially affected by CVE-2026-59205 via pillow (10.3.0)

pillow PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils =0.0.1, =0.3.2, =0.1.0, =1.7.0, =0.9.5, =0.1.0, =0.1.10, =24.5.0, =1.0.5, =0.1.0, =0.1.1 - arcplot 1.0.0 and more Source cves:...

abracadabra (0.0.6), agilecode-test-tools (>=0.4.0, <=0.5.0) +76 more potentially affected by CVE-2026-59205 via pillow (8.1.0)

pillow PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.6 - agilecode-test-tools =0.4.0, =0.1.1, =0.1.0, =0.11.0, =0.1.0, =0.4.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves:...

aamutils (>=0.0.11, <=0.0.12), adversarial-workflow (>=0.4.0, <=0.9.8) +516 more potentially affected by CVE-2026-59205 via pillow (>=12.0.0, <=12.2.0)

pillow PYPI version =12.0.0, =0.0.11, =0.4.0, =1.10.0rc1, =0.0.116, =0.13.2, =0.1.0rc1, =1.0.7, =0.1.0, =1.1.0, =1.3.0, =0.1.0, =0.2.0, =0.6.0, =0.8.0.dev20260511, =0.13.0.dev20261012 and more Source cves: CVE-2026-59205 Source advisory: GHSA-9HW9-CH79-4VH6...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-59205 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...