Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Pillow library may allow unauthorized code execution
published 3 months ago
Summary
The Python imaging library Pillow has a security weakness that could let an attacker run unwanted code on your system. This can affect any application that uses Pillow, such as image‑processing tools or web services. Update to the latest TuxCare‑rebuilt version (9.4.0.post1+tuxcare) to remove the risk.
What to do
- Update jeffrey 'alex' clark pillow to version 9.4.0.post1+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | jeffrey 'alex' clark | pillow |
< 9.4.0.post1+tuxcare Fix: upgrade to 9.4.0.post1+tuxcare
|
Original advisory text
TuxCare security update for pillow (1 CVE)
TuxCare rebuilt pillow to address 1 CVE. Fixed in 9.4.0.post1+tuxcare.
Timeline
Published4 Aug 2026
Updated16 Oct 2026
First seen16 Oct 2026
Sources
CLSA-2026-1772410260 · OSV
Track software like this
Free during beta