ROOT-APP-PYPI-CVE-2026-59205 CVE-2026-59205 in pillow - Patched by Root

Root has patched CVE-2026-59205 in the pillow package for Root:PyPI. Multiple fixed versions available...

SUSE SLED15 / SLES15 Security Update : python-Pillow (SUSE-SU-2026:3268-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3268-1 advisory. - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. -...

CVE-2026-59205 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2, lmcache-cuda-12.8, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2026.1, superset-fips, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, mlflow, text-generation-inference, superset, openstack-horizon-2025.2-fips,...

CVE-2026-59205

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:08+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6 2026-07-21 06:31:17+00:00| seen| https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724...

aug (0.1.0), chromewhip (>=0.3.0, <=0.3.4) +85 more potentially affected by CVE-2026-59205 via pillow (6.0.0)

pillow PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aug 0.1.0 - chromewhip =0.3.0, =1.0.2, =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =0.0.1, =3.7.0a4, =0.3.7, =0.0.1, =2.3.0.18070322,...

sphinxmark (0.1.15) potentially affected by CVE-2026-59205 via pillow (3.4.1)

pillow PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - sphinxmark 0.1.15 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...

3deecelltracker (0.5.0a0), aima (2023.2.4) +60 more potentially affected by CVE-2026-59205 via pillow (9.1.0)

pillow PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker 0.5.0a0 - aima 2023.2.4 - an-website =22.5.13, =2.4.5, =0.2.4rc1, =22.14.1, =0.0.3, =1.0.1, =0.1.0, =0.0.36, =0.0.39 and more Source...

abraia (>=0.8.10, <=0.9.2), adamapi (>=2.1.0, <=2.2.0) +128 more potentially affected by CVE-2026-59205 via pillow (8.3.2)

pillow PYPI version 8.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abraia =0.8.10, =2.1.0, =1.1.3, =1.5.0, =0.0.25, =0.2.2, =0.0.2a2, =1.4.0, =0.2.2, =0.0.1, =0.2.1b20210731, =0.2.1b20210731, =0.3.2b20211206 and mor...

3deecelltracker (>=0.5.1a0, <=0.5.2a0), adversarial-attacks-white-black-box (0.1.7) +200 more potentially affected by CVE-2026-59205 via pillow (9.3.0)

pillow PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker =0.5.1a0, =1.5.0rc1, =0.0.3, =22.11.2, =2.6.17, =0.1.0a0, =0.1.0, =0.0.1a1, =0.3.1rc5, =0.8.0, =22.43.1, =22.52.1 and more Source...

alphad3m (>=0.10.0.dev0, <=0.10.0.dev1), amazoncaptcha (>=0.0.9, <=0.3.9) +55 more potentially affected by CVE-2026-59205 via pillow (7.1.2)

pillow PYPI version 7.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - alphad3m =0.10.0.dev0, =0.0.9, =0.0.1, =1.2.0, =0.1.3, =2.0.0rc1, =0.0.1, =1.2.4, =0.1.0, =0.3.1, =0.0.1, =0.1.4, =2022.1.5, =2022.5.26 and more...

2dify (1.0.1), 3deecelltracker (1.0.1) +2377 more potentially affected by CVE-2026-59205 via pillow (11.3.0)

pillow PYPI version 11.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2dify 1.0.1 - 3deecelltracker 1.0.1 - aaa-ml-datasets-course 1.0.0 - aaanalysis =1.0.1, =1.0.0, =0.2.0a0, =0.1.32, =0.0.29, =2.6.7, =0.1.3, =0.1.0,...

agkit (>=0.17.0, <=0.26.0), ai-puti (0.1.0b5) +238 more potentially affected by CVE-2026-59205 via pillow (11.1.0)

pillow PYPI version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - agkit =0.17.0, =0.2.0, =0.1.0, =0.76.0, =0.1.1, =3.1.8, =0.1.0, =0.1.0, =0.5.0, =25.2.0, =1.0.4, =0.1.0, =0.1.12 - arched-emailer 0.4.6 and more...

altair-images (>=0.1.0, <=0.1.4), colorizexl (>=0.0.1, <=0.2.1) +13 more potentially affected by CVE-2026-59205 via pillow (7.1.1)

pillow PYPI version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - altair-images =0.1.0, =0.0.1, =0.0.5, =0.6.0.post3, =0.4.3, =0.6.18, =1.0.4, =0.0.95, =0.4.1.post1, =0.1.1, =0.0.1, =0.3.0, =1.3.0, =0.2.5, =0.2.6...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-59205 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...

dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +13 more potentially affected by CVE-2026-59205 via pillow (3.4.2)

pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2026-59205 Sour...

chromewhip (>=0.2.2, <=0.2.16), cloud-volume (>=0.6.12, <=0.8.1) +11 more potentially affected by CVE-2026-59205 via pillow (4.2.1)

pillow PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - chromewhip =0.2.2, =0.6.12, =4.4.1, =0.0.1a0, =0.9.0, =0.6.19a0, =0.3.5, =0.0.3, =11.0.0, =11.2.0 Source cves: CVE-2026-59205 Source advisory:...

appixer-metadata (>=1.0.0, <=1.0.2), bcipy (1.5.0) +11 more potentially affected by CVE-2026-59205 via pillow (8.0.0)

pillow PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - appixer-metadata =1.0.0, =0.2.0, =0.0.3, =1.0.1, =2.0.6, =0.7.0, =0.0.1, =0.3.0 Source cves: CVE-2026-59205 Source advisory: OSV:GHSA-9HW9-CH79-4VH6...

aider-chat (>=0.82.3, <=0.85.2), aider-code (>=0.1.0.dev19, <=0.1.1.post14) +186 more potentially affected by CVE-2026-59205 via pillow (11.2.1)

pillow PYPI version 11.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aider-chat =0.82.3, =0.1.0.dev19, =0.0.1, =3.1.20260611, =0.1.0, =0.2.0, =0.1.0, =2026.5.28, =2026.4.15, =2.0.6, =25.5.0, =0.0.0, =1.4.3, =0.5.0b2,...

academic-emotion (0.1.2), afipcaeqrdecode (>=0.0.1b0, <=0.0.4) +266 more potentially affected by CVE-2026-59205 via pillow (10.1.0)

pillow PYPI version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - academic-emotion 0.1.2 - afipcaeqrdecode =0.0.1b0, =0.1.6, =0.1.0, =23.11.0, =0.9.0, =0.3.5rc1, =0.1.0, =1.2.0 - asterai 0.1.1 - automate3 2023.11....

aichatbot (0.0.1), aiqc (>=2.1.0, <=7.1.5) +53 more potentially affected by CVE-2026-59205 via pillow (8.1.2)

pillow PYPI version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aichatbot 0.0.1 - aiqc =2.1.0, =0.0.2, =0.0.1, =0.14.0, =0.14.0, =0.0.0a1, =2.0.1, =0.2.0, =0.0.2, =3.0.8rc6, =3.0.8rc7 - django-image-assets 0.2.0...