Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
pillow library may allow execution of malicious code
published 1 month ago
Summary
The Python imaging library named pillow, used in your applications, had a security weakness that could let an attacker run unwanted code. This has been fixed in the latest pillow version 9.4.0.post7+tuxcare. Update pillow to this version to protect your systems.
What to do
- Update jeffrey 'alex' clark pillow to version 9.4.0.post7+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | jeffrey 'alex' clark | pillow |
< 9.4.0.post7+tuxcare Fix: upgrade to 9.4.0.post7+tuxcare
|
Original advisory text
TuxCare security update for pillow (1 CVE)
TuxCare rebuilt pillow to address 1 CVE. Fixed in 9.4.0.post7+tuxcare.
Timeline
Published24 Sep 2026
Updated24 Sep 2026
First seen24 Sep 2026
Sources
CLSA-2026-1790246531 · OSV
Track software like this
Free during beta