Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
pillow library could allow attacker code execution
published 13 days ago
Summary
The Python imaging library called pillow has several security gaps that could let a malicious user run unwanted code on your system. Updating to version 11.3.0.post8+tuxcare removes these risks. Apply the latest pillow package from TuxCare as soon as possible.
What to do
- Update jeffrey 'alex' clark pillow to version 11.3.0.post8+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | jeffrey 'alex' clark | pillow |
>= 11.3.0, < 11.3.0.post8+tuxcare Fix: upgrade to 11.3.0.post8+tuxcare
|
Original advisory text
TuxCare security update for pillow (10 CVEs)
TuxCare rebuilt pillow to address 10 CVEs. Fixed in 11.3.0.post8+tuxcare.
Timeline
Published22 Oct 2026
Updated22 Oct 2026
First seen22 Oct 2026
Sources
CLSA-2026-1792652081 · OSV
Track software like this
Free during beta