CVE-2026-112895

The Pillow Python imaging library (versions 5.1.0 through 13.0.0 ) is vulnerable to resource exhaustion during PDF append operations. The root cause lies in the PdfParser component, which lacks cycle or duplication tracking when following page-tree child references and follows previous-trailer ch...