SUSE CVE-2026-112900

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a...

Linux Distros Unpatched Vulnerability : CVE-2026-112900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input...

DEBIAN-CVE-2026-112900

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a...

PT-2026-117686

Name of the Vulnerable Software and Affected Versions Pillow versions 2.6.0 through 12.11.0 Description Argument injection occurs when invoking Ghostscript for EPS input. The EpsImagePlugin.Ghostscript function passes a caller-controlled input filename after the -f flag without converting it to a...