CVE-2026-106443

The web tool WeasyPrint (prior to version 70.0 ) is vulnerable to Remote Code Execution (RCE) due to improper input validation in the weasyprint/images.py component. The software passes image bytes from HTML URLs, CSS values, SVG references, and data URIs to Pillow's image dispatcher without filt...

PIL-CVE-2017-8291

Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow is a popular image processing library for Python. It supports various image formats and provides powerful image manipulation capabilities. The Python image processing module PIL Pillow is...

Security update for exiv2

This update for exiv2 fixes the following issues CVE-2021-34334: DoS due to integer overflow in loop counter bsc1189338. CVE-2026-25884: out-of-bounds read in CrwMap: decode0x0805 bsc1259083. CVE-2026-27596: integer overflow in LoaderNative: getData leads to out-of-bounds read bsc1259084...