Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
CGA-745h-fqrc-jwj6
published 13 days ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | mlflow | All versions |
Original advisory text
CGA-745h-fqrc-jwj6
References
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-78g4-xqwv-q3g8 URL
- https://github.com/python-pillow/Pillow/commit/5f8114c8096b181fae493543cd3837d9f... URL
- https://github.com/python-pillow/Pillow/commit/d3470c327840f4c216a1610f30e7091df... URL
- https://github.com/uclouvain/openjpeg/commit/91d08b11a72764f6d199f32fa0c1b1abd4e... URL
- https://github.com/python-pillow/Pillow Product
- https://github.com/python-pillow/Pillow/releases/tag/13.0.0 URL
- https://osv.dev/vulnerability/OSV-2025-219 URL
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published23 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CGA-745h-fqrc-jwj6 · OSV
Track software like this
Free during beta