Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Pillow library may let attackers run code
published 1 month ago
Summary
The Python image‑handling library Pillow has four security weaknesses that could let malicious users execute code on your system. Updating to version 9.4.0.post9+tuxcare removes these risks. Apply the latest Pillow package as soon as possible.
What to do
- Update jeffrey 'alex' clark pillow to version 9.4.0.post9+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | jeffrey 'alex' clark | pillow |
>= 9.4.0, < 9.4.0.post9+tuxcare Fix: upgrade to 9.4.0.post9+tuxcare
|
Original advisory text
TuxCare security update for pillow (4 CVEs)
TuxCare rebuilt pillow to address 4 CVEs. Fixed in 9.4.0.post9+tuxcare.
Timeline
Published30 Sep 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1790751826 · OSV
Track software like this
Free during beta