Vulnerabilities
Pillow 13.0.0 Fixes High-Severity Heap Buffer Over-Read in TIFF Decoder
Security teams must upgrade Pillow to version 13.0.0 to address a high-severity memory leak in TIFF decoding that exposes heap contents.
Pillow
Everything Vuln Post has reported about Pillow: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Pillow Ghostscript Argument Injection CVE-2026-112900 Patched in Version 13.0.0 Release
Python imaging library Pillow has released version 13.0.0 to fix a critical argument injection flaw that allows attackers to execute arbitrary commands via Ghostscript.
Vulnerabilities
Pillow APNG Memory Exhaustion Vulnerability Fixed in Version 13.0.0
A high-severity flaw in the Python imaging library allows crafted animated PNGs to crash servers by exhausting system memory before safety checks run.