Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
pillow library may let attackers disrupt your system
published 3 months ago
Summary
The Python imaging library pillow used in your applications has three security weaknesses that could let an attacker cause crashes or other unwanted behavior. These issues have been fixed in version 9.4.0.post2+tuxcare. Upgrade pillow to this version as soon as possible to protect your systems.
What to do
- Update jeffrey 'alex' clark pillow to version 9.4.0.post2+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | jeffrey 'alex' clark | pillow |
>= 9.4.0, < 9.4.0.post2+tuxcare Fix: upgrade to 9.4.0.post2+tuxcare
|
Original advisory text
TuxCare security update for pillow (3 CVEs)
TuxCare rebuilt pillow to address 3 CVEs. Fixed in 9.4.0.post2+tuxcare.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1772410261 · OSV
Track software like this
Free during beta