{"id":"CVE-2026-25990","aliases":["ALPINE-CVE-2026-25990","BIT-pillow-2026-25990","CLSA-2026-1774830261","CLSA-2026-1774830267","CLSA-2026-1786515922","DEBIAN-CVE-2026-25990","DSA-6147-1","EUVD-2026-6218","GHSA-cfh3-3jmp-rvhc","OESA-2026-1477","OESA-2026-1478","OESA-2026-1479","OESA-2026-1480","PYSEC-2026-2249","RHSA-2026:14873","RHSA-2026:14874","RHSA-2026:28385","RHSA-2026:6277","RHSA-2026:6278","SUSE-SU-2026:20992-1","UBUNTU-CVE-2026-25990","USN-8047-1","openSUSE-SU-2026:10198-1","openSUSE-SU-2026:20458-1"],"status":"published","title":"Pillow has an out-of-bounds write when loading PSD images","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","severity":{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00403,"percentile":0.34976,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-02-11T14:22:50Z","modified":"2026-11-03T06:33:01Z","fixes":[{"ecosystem":"PyPI","package":"pillow","fixed_in":["12.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.23","package":"py3-pillow","fixed_in":["11.3.0-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"py3-pillow","fixed_in":["12.1.1-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"pillow","fixed_in":["12.1.1"],"sources":["osv"]},{"ecosystem":"TuxCare:PyPI","package":"pillow","fixed_in":["10.4.0.post1+tuxcare","11.3.0.post1+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pillow","fixed_in":["11.1.0-5+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pillow","fixed_in":["12.1.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"python-pillow","fixed_in":["10.3.0-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"python-pillow","fixed_in":["10.3.0-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"python-pillow","fixed_in":["10.3.0-2.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"python-pillow","fixed_in":["10.3.0-2.oe2403sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python-Pillow","fixed_in":["11.3.0-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python-Pillow","fixed_in":["11.3.0-160000.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"pillow","fixed_in":["11.3.0-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","fixed_in":["12.1.1-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"python-Pillow","fixed_in":["11.3.0-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.3.0"},{"fixed":"12.1.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.1-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"pillow","ranges":[{"type":"SEMVER","events":[{"introduced":"10.3.0"},{"fixed":"12.1.1"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.4.0"},{"fixed":"10.4.0.post1+tuxcare"}]}],"versions":["10.4.0"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.3.0"},{"fixed":"11.3.0.post1+tuxcare"}]}],"versions":["11.3.0"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.1"},{"fixed":"11.2.1.post4+tuxcare"}]}],"versions":["11.2.1","11.2.1.post1+tuxcare","11.2.1.post2+tuxcare","11.2.1.post3+tuxcare"],"bundled":9},{"source":"osv","ecosystem":"Debian:13","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.0-5+deb13u1"}]}],"versions":["11.1.0-5"]},{"source":"osv","ecosystem":"Debian:14","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.1-1"}]}],"versions":["11.1.0-5","11.2.1-1","11.3.0-1","12.0.0-1","12.1.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.0-5+deb13u1"}]}],"versions":["11.1.0-5"]},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.3.0"},{"fixed":"12.1.1"}]}],"versions":["10.3.0","10.4.0","11.0.0","11.1.0","11.2.1","11.3.0","12.0.0","12.1.0"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.0-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.0-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.0-2.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.0-2.oe2403sp3"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.3.0"},{"fixed":"12.1.1"}]}],"versions":["10.3.0","10.4.0","11.0.0","11.1.0","11.2.1","11.3.0","12.0.0","12.1.0"]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.1.0-0.3.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.1.0-0.3.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.1.0-0.3.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.1.0-0.3.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.25-1.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.25-1.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.8.7-2.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.8.7-2.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.2-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.0-2.el9pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.25-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.25-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.25-1.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.25-1.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.8-2.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.8-2.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.8-2.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.8-2.el9sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"dynflow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"dynflow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-platform-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-4.el8ap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-proxy-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-4.el8ap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-proxy-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el8ap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9ap"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-160000.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-1ubuntu1.1"}]}],"versions":["11.1.0-5build1","11.3.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-1ubuntu1.1"}]}],"versions":["11.1.0-5build1","11.3.0-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-160000.3.1"}]}]}],"products":[{"vendor":"python","product":"pillow"},{"vendor":"python-pillow","product":"pillow"},{"vendor":"red hat","product":"openshift lightspeed"},{"vendor":"red hat","product":"red hat ai inference server"},{"vendor":"red hat","product":"red hat ai inference server 3.2"},{"vendor":"red hat","product":"red hat ai inference server 3.3"},{"vendor":"red hat","product":"red hat ansible automation platform 2"},{"vendor":"red hat","product":"red hat ansible automation platform 2.5"},{"vendor":"red hat","product":"red hat ansible automation platform 2.5 for rhel 8"},{"vendor":"red hat","product":"red hat ansible automation platform 2.5 for rhel 9"},{"vendor":"red hat","product":"red hat ansible automation platform 2.6"},{"vendor":"red hat","product":"red hat ansible automation platform 2.6 for rhel 9"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux ai (rhel ai) 3"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift ai 2.25"},{"vendor":"red hat","product":"red hat openshift ai 3.3"},{"vendor":"red hat","product":"red hat quay 3.10"},{"vendor":"red hat","product":"red hat quay 3.12"},{"vendor":"red hat","product":"red hat quay 3.15"},{"vendor":"red hat","product":"red hat quay 3.16"},{"vendor":"red hat","product":"red hat quay 3.9"},{"vendor":"red hat","product":"red hat satellite 6"},{"vendor":"red hat","product":"red hat satellite 6.16 for rhel 8"},{"vendor":"red hat","product":"red hat satellite 6.16 for rhel 9"},{"vendor":"red hat","product":"red hat satellite 6.17 for rhel 9"},{"vendor":"red hat","product":"red hat satellite 6.18 for rhel 9"}],"references":[{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa","tags":["x_refsource_MISC","Patch","fix","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/02/12/1","tags":["Mailing List","Patch","Third Party Advisory","advisory","web","fix","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25990","tags":["vdb-entry","x_refsource_REDHAT","web","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439170","tags":["issue-tracking","x_refsource_REDHAT","web","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25990.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6278","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14874","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6277","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14873","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28385","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4128","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3461","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3462","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16174","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6308","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6309","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10184","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42644","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19712","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5665","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4942","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6568","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6497","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6567","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5168","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://github.com/python-pillow/Pillow/pull/9427","tags":["web"]},{"url":"https://github.com/python-pillow/Pillow/commit/54ba4db542ad3c7b918812a4e2d69c27735a3199","tags":["web"]},{"url":"https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25990","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-cfh3-3jmp-rvhc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-25990","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25990.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-25990","tags":["advisory"]},{"url":"https://github.com/python-pillow/Pillow","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1477","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1478","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1479","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1480","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450551","tags":["report"]},{"url":"https://issues.redhat.com/browse/SAT-43920","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43921","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43922","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43923","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43925","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43926","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43928","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43929","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43931","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44039","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14873.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69534","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69534","tags":["advisory"]},{"url":"https://github.com/Python-Markdown/markdown","tags":["article"]},{"url":"https://github.com/Python-Markdown/markdown/actions/runs/15736122892","tags":["article"]},{"url":"https://github.com/Python-Markdown/markdown/issues/1534","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25990","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27459","tags":["advisory"]},{"url":"https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst","tags":["article"]},{"url":"https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408","tags":["article"]},{"url":"https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27727","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27727","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27727","tags":["advisory"]},{"url":"https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44","tags":["article"]},{"url":"https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal","tags":["article"]},{"url":"https://www.mchange.com/projects/c3p0/#configuring_security","tags":["article"]},{"url":"https://www.mchange.com/projects/c3p0/#security-note","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33176","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33176","tags":["advisory"]},{"url":"https://github.com/rails/rails/commit/19dbab51ca086a657bb86458042bc44314916bcb","tags":["article"]},{"url":"https://github.com/rails/rails/commit/ebd6be18120d1136511eb516338e27af25ac0a1a","tags":["article"]},{"url":"https://github.com/rails/rails/commit/ee2c59e730e5b8faed502cd2c573109df093f856","tags":["article"]},{"url":"https://github.com/rails/rails/releases/tag/v7.2.3.1","tags":["article"]},{"url":"https://github.com/rails/rails/releases/tag/v8.0.4.1","tags":["article"]},{"url":"https://github.com/rails/rails/releases/tag/v8.1.2.1","tags":["article"]},{"url":"https://github.com/rails/rails/security/advisories/GHSA-2j26-frm8-cmj9","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-43834","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44030","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44031","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44032","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44033","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44034","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44035","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-44036","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14874.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456336","tags":["report"]},{"url":"https://issues.redhat.com/browse/SAT-45570","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-45571","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-45836","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-45883","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28385.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27830","tags":["advisory"]},{"url":"https://github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e","tags":["article"]},{"url":"https://github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32282","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32282","tags":["advisory"]},{"url":"https://go.dev/cl/763761","tags":["article"]},{"url":"https://go.dev/issue/78293","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4864","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2438237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445132","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6277.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61726","tags":["advisory"]},{"url":"https://go.dev/cl/736712","tags":["article"]},{"url":"https://go.dev/issue/77101","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4341","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68121","tags":["advisory"]},{"url":"https://go.dev/cl/737700","tags":["article"]},{"url":"https://go.dev/issue/77217","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/K09ubi9FQFk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4337","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69873","tags":["advisory"]},{"url":"https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25639","tags":["advisory"]},{"url":"https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57","tags":["article"]},{"url":"https://github.com/axios/axios/releases/tag/v1.13.5","tags":["article"]},{"url":"https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27904","tags":["advisory"]},{"url":"https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-29074","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-29074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29074","tags":["advisory"]},{"url":"https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6278.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620992-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258125","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25990","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-25990","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8047-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-25990","title":"Pillow has an out-of-bounds write when loading PSD images","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-11T20:53:52.524Z","modified":"2026-09-16T12:04:20.759Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-787","CWE-787"],"updated_at":"2026-11-02T13:41:19.694734Z"}],"euvd":[{"id":"EUVD-2026-6218","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-11T20:53:52Z","modified":"2026-09-16T12:04:20Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:28:16.201278Z"}],"ghsa":[{"id":"GHSA-cfh3-3jmp-rvhc","title":"Pillow affected by out-of-bounds write when loading PSD images","description":"### Impact\nAn out-of-bounds write may be triggered when loading a specially crafted PSD image. Pillow \u003e= 10.3.0 users are affected.\n\n### Patches\nPillow 12.1.1 will be released shortly with a fix for this.\n\n### Workarounds\n`Image.open()` has a `formats` parameter that can be used to prevent PSD images from being opened.\n\n### References\nPillow 12.1.1 will add release notes at https://pillow.readthedocs.io/en/stable/releasenotes/index.html","status":"published","published":"2026-02-11T14:22:50Z","modified":"2026-04-30T20:14:49Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:39:59.776263Z"}],"nvd":[{"id":"CVE-2026-25990","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-11T21:16:20.67Z","modified":"2026-09-10T13:17:55.22Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:12:05.908608Z"}],"osv":[{"id":"ALPINE-CVE-2026-25990","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-11T21:16:20.67Z","modified":"2026-11-03T06:33:01.961573294Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"CVE-2026-25990","title":"Pillow has an out-of-bounds write when loading PSD images","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-11T20:53:52.524Z","modified":"2026-10-28T11:09:52.909916114Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:44:59.80315Z"},{"id":"DEBIAN-CVE-2026-25990","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-11T21:16:20.67Z","modified":"2026-10-01T03:03:21.29489358Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"GHSA-cfh3-3jmp-rvhc","title":"Pillow affected by out-of-bounds write when loading PSD images","description":"### Impact\nAn out-of-bounds write may be triggered when loading a specially crafted PSD image. Pillow \u003e= 10.3.0 users are affected.\n\n### Patches\nPillow 12.1.1 will be released shortly with a fix for this.\n\n### Workarounds\n`Image.open()` has a `formats` parameter that can be used to prevent PSD images from being opened.\n\n### References\nPillow 12.1.1 will add release notes at https://pillow.readthedocs.io/en/stable/releasenotes/index.html","status":"published","published":"2026-02-11T14:22:50Z","modified":"2026-09-10T03:50:59.393816085Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:46:44.927642Z"},{"id":"OESA-2026-1477","title":"python-pillow security update","description":"Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \\ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift.   %package -n python3-pillow Summary:        Python 3 image processing library  Provides:       python3-imaging = -\r\n\r\nSecurity Fix(es):\n\nPillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.(CVE-2026-25990)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:34.699430391Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1478","title":"python-pillow security update","description":"Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \\ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift.   %package -n python3-pillow Summary:        Python 3 image processing library  Provides:       python3-imaging = -\r\n\r\nSecurity Fix(es):\n\nPillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.(CVE-2026-25990)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:34.876852349Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1479","title":"python-pillow security update","description":"Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \\ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift.   %package -n python3-pillow Summary:        Python 3 image processing library  Provides:       python3-imaging = -\r\n\r\nSecurity Fix(es):\n\nPillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.(CVE-2026-25990)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:34.870328313Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1480","title":"python-pillow security update","description":"Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \\ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift.   %package -n python3-pillow Summary:        Python 3 image processing library  Provides:       python3-imaging = -\r\n\r\nSecurity Fix(es):\n\nPillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.(CVE-2026-25990)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:35.272427348Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"PYSEC-2026-2249","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-11T21:16:20.67Z","modified":"2026-07-13T07:26:49.514806069Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:55.537808Z"},{"id":"RHSA-2026:14873","title":"Red Hat Security Advisory: Satellite 6.17.8 Async Update","status":"published","published":"2026-05-08T10:05:28Z","modified":"2026-10-20T10:04:58Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:14874","title":"Red Hat Security Advisory: Satellite 6.16.8 Async Update","status":"published","published":"2026-05-08T10:05:29Z","modified":"2026-10-20T10:04:58Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:28385","title":"Red Hat Security Advisory: Satellite 6.18.6 Async Update","status":"published","published":"2026-06-24T10:08:39Z","modified":"2026-10-20T10:07:00Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:6277","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","status":"published","published":"2026-04-01T10:07:53Z","modified":"2026-10-20T10:12:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:6278","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","status":"published","published":"2026-04-02T10:18:56Z","modified":"2026-10-20T10:12:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"UBUNTU-CVE-2026-25990","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-13T00:00:00Z","modified":"2026-10-28T20:17:19.452088462Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"BIT-pillow-2026-25990","title":"Pillow has an out-of-bounds write when loading PSD images","description":"Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.","status":"published","published":"2026-02-16T16:02:06.871Z","modified":"2026-09-08T08:48:18.551817866Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"CLSA-2026-1774830261","title":"TuxCare security update for pillow (1 CVE)","description":"TuxCare rebuilt pillow to address 1 CVE. Fixed in 10.4.0.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:16Z","modified":"2026-10-15T09:48:04.967263514Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774830267","title":"TuxCare security update for pillow (1 CVE)","description":"TuxCare rebuilt pillow to address 1 CVE. Fixed in 11.3.0.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:16Z","modified":"2026-10-15T09:48:04.931353737Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1786515922","title":"TuxCare security update for pillow (9 CVEs)","description":"TuxCare rebuilt pillow to address 9 CVEs. Fixed in 11.2.1.post4+tuxcare.","status":"published","published":"2026-08-12T06:25:22Z","modified":"2026-10-15T09:48:05.294046428Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"DSA-6147-1","title":"pillow - security update","status":"published","published":"2026-02-20T00:00:00Z","modified":"2026-02-20T20:30:28.861208Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"openSUSE-SU-2026:10198-1","title":"python311-Pillow-12.1.1-1.1 on GA media","description":"These are all security issues fixed in the python311-Pillow-12.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-13T00:00:00Z","modified":"2026-03-23T04:54:33.601065Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20458-1","title":"Security update for python-Pillow","description":"This update for python-Pillow fixes the following issues:\n\n- CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. (bsc#1258125)\n","status":"published","published":"2026-04-01T14:57:29Z","modified":"2026-04-05T18:29:14.753943Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:20992-1","title":"Security update for python-Pillow","description":"This update for python-Pillow fixes the following issues:\n\n- CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. (bsc#1258125)\n","status":"published","published":"2026-04-01T14:58:21Z","modified":"2026-04-10T18:33:46.121592Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"USN-8047-1","title":"pillow vulnerability","description":"Yarden Porat discovered that Pillow incorrectly handled certain malformed\nPSD images. An attacker could use this issue to cause Pillow to crash,\nresulting in a denial of service, or possibly execute arbitrary code.","status":"published","published":"2026-02-17T12:52:01Z","modified":"2026-10-27T04:16:47.322585822Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}