agkit (>=0.17.0, <=0.26.0), ai-puti (0.1.0b5) +238 more potentially affected by CVE-2026-112394 via pillow (11.1.0)

pillow PYPI version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - agkit =0.17.0, =0.2.0, =0.1.0, =0.76.0, =0.1.1, =3.1.8, =0.1.0, =0.1.0, =0.5.0, =25.2.0, =1.0.4, =0.1.0, =0.1.12 - arched-emailer 0.4.6 and more...

aug (0.1.0), chromewhip (>=0.3.0, <=0.3.4) +85 more potentially affected by CVE-2026-112394 via pillow (6.0.0)

pillow PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aug 0.1.0 - chromewhip =0.3.0, =1.0.2, =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =0.0.1, =3.7.0a4, =0.3.7, =0.0.1, =2.3.0.18070322,...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), 2022-2-gces-ifpf (0.3.0) +1331 more potentially affected by CVE-2026-112394 via pillow (9.5.0)

pillow PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 170051277-trab-final-gces =0.3.0, =0.1.0, =0.1.0, =2.0.1, =0.1.4, =1.2.5, =0.1.0, =1.2.0, =1.10.3, =0.61.9b59, =1.3.1 and more Source cves:...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +2666 more potentially affected by CVE-2026-112394 via pillow (12.3.0)

pillow PYPI version 12.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3d-rcnet =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source...

aebo (>=0.3.0, <=0.9.0), aebo-pi (>=0.1.0, <=0.8.0) +173 more potentially affected by CVE-2026-112394 via pillow (9.0.1)

pillow PYPI version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aebo =0.3.0, =0.1.0, =1.3.0, =1.0.0, =0.4.10, =2.1.0, =0.5.3, =2.6.9, =0.2.3rc4, =1.1.1, =0.5.17, =1.0.0, =22.9.1, =0.3.2b20220226, =0.5.3 and more...

sphinxmark (0.1.15) potentially affected by CVE-2026-112394 via pillow (3.4.1)

pillow PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - sphinxmark 0.1.15 Source cves: CVE-2026-112394 Source advisory: OSV:PYSEC-2026-4327...

adversarial-insight-ml (0.1.0), aioinstagrapi (>=1.1.19, <=1.1.21) +183 more potentially affected by CVE-2026-112394 via pillow (10.0.1)

pillow PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-insight-ml 0.1.0 - aioinstagrapi =1.1.19, =1.1.2, =1.7.3, =0.0.1, =0.0.29, =0.1.0, =4.4.0.69, =4.0.0, =1.0.0, =1.0.1 and more Source...

UBUNTU-CVE-2026-112395

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-co...

UBUNTU-CVE-2026-112391

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.getvalue can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays and dictionaries when an existing PDF is opened for append. An attacker can provide a deeply nested...

UBUNTU-CVE-2026-112390

Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek resets TIFF frame state, so an embedded TIFF...

UBUNTU-CVE-2026-112393

Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno, such as BytesIO. The callback sizes its allocation from the prior buffer...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +3074 more potentially affected by CVE-2026-112401 via pillow (>=12.0.0, <=12.3.0)

pillow PYPI version =12.0.0, =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source cves: CVE-2026-112401 Source advisory: MEND:CVE-2026-112401...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +3074 more potentially affected by CVE-2026-112400 via pillow (>=12.0.0, <=12.3.0)

pillow PYPI version =12.0.0, =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source cves: CVE-2026-112400 Source advisory: MEND:CVE-2026-112400...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +3074 more potentially affected by CVE-2026-112399 via pillow (>=12.0.0, <=12.3.0)

pillow PYPI version =12.0.0, =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source cves: CVE-2026-112399 Source advisory: MEND:CVE-2026-112399...

CLSA-2026-1792444141 fribidi: Fix of CVE-2022-25308

CVE-2022-25308: fix stack-based buffer overflow...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +3074 more potentially affected by CVE-2026-112398 via pillow (>=12.0.0, <=12.3.0)

pillow PYPI version =12.0.0, =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source cves: CVE-2026-112398 Source advisory: MEND:CVE-2026-112398...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +3074 more potentially affected by CVE-2026-112396 via pillow (>=12.0.0, <=12.3.0)

pillow PYPI version =12.0.0, =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source cves: CVE-2026-112396 Source advisory: MEND:CVE-2026-112396...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +3074 more potentially affected by CVE-2026-112395 via pillow (>=12.0.0, <=12.3.0)

pillow PYPI version =12.0.0, =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source cves: CVE-2026-112395 Source advisory: MEND:CVE-2026-112395...

CLSA-2026-1792443101 TuxCare security update for browserslist (2 CVEs)

TuxCare rebuilt browserslist to address 2 CVEs. Fixed in 4.28.5-tuxcare.1...

3d-rcnet (>=0.2.2, <=0.2.3), 3lc (>=3.2.0, <=3.4.2) +3074 more potentially affected by CVE-2026-112394 via pillow (>=12.0.0, <=12.3.0)

pillow PYPI version =12.0.0, =0.2.2, =3.2.0, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.1.6, =0.1.0, =0.0.1, =0.5.0, =0.0.6, =0.25.1 and more Source cves: CVE-2026-112394 Source advisory: MEND:CVE-2026-112394...