https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 23 Jul 2026 15:43:42 +0000 https://vulnerability.circl.lu/sighting/51de13f5-f5b2-475b-aaad-8a302a5ac9d3/export {"uuid": "51de13f5-f5b2-475b-aaad-8a302a5ac9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasp47rfm2j", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05e4\u05d9\u05d9\u05dc\u05d5: CVE-2026-59197 - \u05db\u05ea\u05d9\u05d1\u05d4 \u05de\u05d7\u05d5\u05e5 \u05dc\u05d2\u05d1\u05d5\u05dc\u05d5\u05ea \u05d4\u05d4\u05e8\u05e3\n\n\n\nhttps://khesef.xyz/posts/4E4B5381-1B26-4051-9A47-90E32480B2B3", "creation_timestamp": "2026-07-22T17:06:47.998686Z"} {"uuid": "51de13f5-f5b2-475b-aaad-8a302a5ac9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasp47rfm2j", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05e4\u05d9\u05d9\u05dc\u05d5: CVE-2026-59197 - \u05db\u05ea\u05d9\u05d1\u05d4 \u05de\u05d7\u05d5\u05e5 \u05dc\u05d2\u05d1\u05d5\u05dc\u05d5\u05ea \u05d4\u05d4\u05e8\u05e3\n\n\n\nhttps://khesef.xyz/posts/4E4B5381-1B26-4051-9A47-90E32480B2B3", "creation_timestamp": "2026-07-22T17:06:47.998686Z"} https://vulnerability.circl.lu/sighting/51de13f5-f5b2-475b-aaad-8a302a5ac9d3/export Wed, 22 Jul 2026 17:06:47 +0000 https://vulnerability.circl.lu/sighting/6851a8c3-aebb-44a0-8718-b1c5fde74a02/export {"uuid": "6851a8c3-aebb-44a0-8718-b1c5fde74a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrasoxs43p2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59197 \u0432 Pillow: \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1F9D355C-4444-4038-84FC-BAF3A22EF8EB", "creation_timestamp": "2026-07-22T17:06:43.266057Z"} {"uuid": "6851a8c3-aebb-44a0-8718-b1c5fde74a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrasoxs43p2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59197 \u0432 Pillow: \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1F9D355C-4444-4038-84FC-BAF3A22EF8EB", "creation_timestamp": "2026-07-22T17:06:43.266057Z"} https://vulnerability.circl.lu/sighting/6851a8c3-aebb-44a0-8718-b1c5fde74a02/export Wed, 22 Jul 2026 17:06:43 +0000 https://vulnerability.circl.lu/sighting/7b1bab5a-915a-49a8-a4ea-3c9a092365ff/export {"uuid": "7b1bab5a-915a-49a8-a4ea-3c9a092365ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrafcjbw2i2v", "content": "\ud83d\udccc CVE-2026-59197 - Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very l... https://www.cyberhub.blog/cves/CVE-2026-59197", "creation_timestamp": "2026-07-22T13:07:06.918099Z"} {"uuid": "7b1bab5a-915a-49a8-a4ea-3c9a092365ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrafcjbw2i2v", "content": "\ud83d\udccc CVE-2026-59197 - Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very l... https://www.cyberhub.blog/cves/CVE-2026-59197", "creation_timestamp": "2026-07-22T13:07:06.918099Z"} https://vulnerability.circl.lu/sighting/7b1bab5a-915a-49a8-a4ea-3c9a092365ff/export Wed, 22 Jul 2026 13:07:06 +0000 https://vulnerability.circl.lu/sighting/d8b4b80a-e3cc-4f53-b3a9-b0a965b43e72/export {"uuid": "d8b4b80a-e3cc-4f53-b3a9-b0a965b43e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://gist.github.com/alon710/a3a7380a4e0465c6c32d9063bd8033a6", "content": "# CVE-2026-59197: CVE-2026-59197: Heap Out-of-Bounds Write and Division-by-Zero in Pillow libImaging\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59197\n\n## Summary\nA heap out-of-bounds write vulnerability exists in Pillow prior to version 12.3.0 due to an integer overflow during image expansion calculations. The subsequent patch introduced a division-by-zero regression causing denial of service.\n\n## TL;DR\nInteger overflow in Pillow image expansion leads to heap out-of-bounds write. Initial patch introduces a division-by-zero crash.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-190, CWE-787\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.2\n- **Impact**: Heap Out-of-Bounds Write / Denial of Service\n- **Exploit Status**: PoC Available\n\n## Affected Systems\n\n- Pillow (Python Imaging Library) versions prior to 12.3.0\n- **Pillow**: < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade to Pillow 12.3.0 or higher\n- Implement strict input validation on filter sizes at the application boundary\n- Validate margin is non-zero before calling C extension functions\n\n**Remediation Steps:**\n1. Verify the current Pillow version using python -c 'import PIL; print(PIL.__version__)'\n2. Upgrade using pip install --upgrade Pillow>=12.3.0\n3. Deploy updated application code to production\n\n## References\n\n- [GitHub Advisory](https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr)\n- [Fix Commit](https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1)\n- [Pull Request](https://github.com/python-pillow/Pillow/pull/9695)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59197) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T12:31:41.596835Z"} {"uuid": "d8b4b80a-e3cc-4f53-b3a9-b0a965b43e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59197", "type": "seen", "source": "https://gist.github.com/alon710/a3a7380a4e0465c6c32d9063bd8033a6", "content": "# CVE-2026-59197: CVE-2026-59197: Heap Out-of-Bounds Write and Division-by-Zero in Pillow libImaging\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59197\n\n## Summary\nA heap out-of-bounds write vulnerability exists in Pillow prior to version 12.3.0 due to an integer overflow during image expansion calculations. The subsequent patch introduced a division-by-zero regression causing denial of service.\n\n## TL;DR\nInteger overflow in Pillow image expansion leads to heap out-of-bounds write. Initial patch introduces a division-by-zero crash.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-190, CWE-787\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.2\n- **Impact**: Heap Out-of-Bounds Write / Denial of Service\n- **Exploit Status**: PoC Available\n\n## Affected Systems\n\n- Pillow (Python Imaging Library) versions prior to 12.3.0\n- **Pillow**: < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade to Pillow 12.3.0 or higher\n- Implement strict input validation on filter sizes at the application boundary\n- Validate margin is non-zero before calling C extension functions\n\n**Remediation Steps:**\n1. Verify the current Pillow version using python -c 'import PIL; print(PIL.__version__)'\n2. Upgrade using pip install --upgrade Pillow>=12.3.0\n3. Deploy updated application code to production\n\n## References\n\n- [GitHub Advisory](https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr)\n- [Fix Commit](https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1)\n- [Pull Request](https://github.com/python-pillow/Pillow/pull/9695)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59197) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T12:31:41.596835Z"} https://vulnerability.circl.lu/sighting/d8b4b80a-e3cc-4f53-b3a9-b0a965b43e72/export Tue, 21 Jul 2026 12:31:41 +0000 https://vulnerability.circl.lu/sighting/4d7d9870-4e6d-428d-bd3e-c6cb96013472/export {"uuid": "4d7d9870-4e6d-428d-bd3e-c6cb96013472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59197", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr", "content": "", "creation_timestamp": "2026-07-21T00:35:21.497750Z"} {"uuid": "4d7d9870-4e6d-428d-bd3e-c6cb96013472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59197", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr", "content": "", "creation_timestamp": "2026-07-21T00:35:21.497750Z"} https://vulnerability.circl.lu/sighting/4d7d9870-4e6d-428d-bd3e-c6cb96013472/export Tue, 21 Jul 2026 00:35:21 +0000