17 matches found
BIT-PILLOW-2026-112901 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
PT-2026-123488
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile. open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controll...
GHSA-XGH8-JP6Q-P5X8 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
============================================================================ ReDoS in XbmImagePlugin: 512-byte file stalls Image.open for minutes Location: src/PIL/XbmImagePlugin.py:58 in XbmImageFile.open Commit: a707c6b21c313880d0771e54965d142dd42358b6...
EUVD-2026-104662
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open for minutes...
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
============================================================================ ReDoS in XbmImagePlugin: 512-byte file stalls Image.open for minutes Location: src/PIL/XbmImagePlugin.py:58 in XbmImageFile.open Commit: a707c6b21c313880d0771e54965d142dd42358b6...
PYSEC-2026-4335
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
PYSEC-2026-4335
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
CVE-2026-112901
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
DEBIAN-CVE-2026-112901
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
CVE-2026-112901
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
CVE-2026-112901
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
CVE-2026-112901 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
CVE-2026-112901
The Python imaging library Pillow is vulnerable to a Regular Expression Denial of Service (ReDoS) in its XBM header parser prior to version 13.0.0 . Specifically, the XbmImagePlugin applies a backtracking expression to an attacker-controlled header in XbmImageFile._open when Image.open() is calle...
CVE-2026-112901 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
CVE-2026-112901 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile.open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle...
PT-2026-117687
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The XBM header parser in the Python imaging library is susceptible to a regular-expression denial of service. When the Image.open function is called on a specially crafted XBM file, the XbmImagePlugi...
PT-2026-129107
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile. open, when an application calls Image.open on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controll...