Vulnerability-Lookup

URL	Tags
https://github.com/python-pillow/Pillow/security/…	x_refsource_CONFIRM
https://github.com/python-pillow/Pillow/pull/9520	x_refsource_MISC
https://github.com/python-pillow/Pillow/commit/58…	x_refsource_MISC
https://github.com/python-pillow/Pillow/releases/…	x_refsource_MISC

Vendor	Product	Version
python-pillow	Pillow	Affected: >= 10.3.0, < 12.2.0

bit-pillow-2026-42311

Vulnerability from bitnami_vulndb

Published

2026-05-12 08:54

Modified

2026-05-12 09:14

Summary

Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Details

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Bitnami",
        "name": "pillow",
        "purl": "pkg:bitnami/pillow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "10.3.0"
            },
            {
              "fixed": "12.2.0"
            }
          ],
          "type": "SEMVER"
        }
      ],
      "severity": [
        {
          "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "type": "CVSS_V4"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-42311"
  ],
  "database_specific": {
    "cpes": [
      "cpe:2.3:a:python:pillow:*:*:*:*:*:python:*:*"
    ],
    "severity": "High"
  },
  "details": "Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.",
  "id": "BIT-pillow-2026-42311",
  "modified": "2026-05-12T09:14:35.689Z",
  "published": "2026-05-12T08:54:05.960Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/pull/9520"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311"
    }
  ],
  "schema_version": "1.6.2",
  "summary": "Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)"
}

CERTFR-2026-AVI-0627

Vulnerability from certfr_avis - Published: 2026-05-21 - Updated: 2026-05-21

De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Splunk	Splunk Enterprise	Splunk Enterprise versions 10.2.x antérieures à 10.2.3
Splunk	N/A	Splunk AI Toolkit versions 5.7.x antérieures à 5.7.3
Splunk	Splunk Cloud Platform	Splunk Cloud Platform versions 9.3.2411 antérieures à 9.3.2411.129
Splunk	Splunk Cloud Platform	Splunk Cloud Platform versions 10.3.2512 antérieures à 10.3.2512.9
Splunk	Splunk	image Docker Splunk versions 10.2.x antérieures à 10.2.2
Splunk	Splunk Cloud Platform	Splunk Cloud Platform versions 10.4.2603 antérieures à 10.4.2603.1
Splunk	Splunk AppDynamics Database Agent	Splunk AppDynamics Database Agent versions antérieures à 26.4.0
Splunk	Splunk	image Docker Splunk versions 9.4.x antérieures à 9.4.10
Splunk	Splunk User Behavior Analytics (UBA)	Splunk User Behavior Analytics versions 5.4.x antérieures à 5.4.5
Splunk	Splunk AppDynamics Private Synthetic Agent	Splunk AppDynamics Private Synthetic Agent versions antérieures à 26.4.0
Splunk	Splunk AppDynamics Analytics Agent	Splunk AppDynamics Analytics Agent versions antérieures à 26.4.0
Splunk	N/A	Splunk AppDynamics Cluster Agent versions antérieures à 26.4.0
Splunk	Splunk AppDynamics Machine Agent	Splunk AppDynamics Machine Agent versions antérieures à 26.4.0
Splunk	Splunk Cloud Platform	Splunk Cloud Platform versions 10.2.2510 antérieures à 10.2.2510.11
Splunk	N/A	Splunk AppDynamics Python Agent versions antérieures à 26.4.1
Splunk	Splunk	image Docker Splunk versions 10.0.x antérieures à 10.0.5
Splunk	N/A	Splunk Add-on for Tomcat versions 3.3.x antérieures à 3.3.1
Splunk	Splunk Cloud Platform	Splunk Cloud Platform versions 10.1.2507 antérieures à 10.1.2507.21
Splunk	Splunk Enterprise	Splunk Enterprise versions 10.0.x antérieures à 10.0.6
Splunk	N/A	Splunk AppDynamics Apache Web Server Agent versions 25.11.x antérieures à 25.11.1
Splunk	Splunk Enterprise	Splunk Enterprise versions 9.4.x antérieures à 9.4.11
Splunk	Splunk	image Docker Splunk versions 9.3.x antérieures à 9.3.11
Splunk	Splunk Cloud Platform	Splunk Cloud Platform versions 10.0.2503 antérieures à 10.0.2503.13
Splunk	Universal Forwarder	Splunk Universal Forwarder versions 9.4.x antérieures à 9.4.11
Splunk	Splunk Enterprise	Splunk Enterprise versions 9.3.x antérieures à 9.3.12
Splunk	Splunk AppDynamics Java Agent	Splunk AppDynamics Java Agent versions antérieures à 26.4.0

References

Title

Publication Time

Tags

Bulletin de sécurité Splunk SVD-2026-0512	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0513	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0509	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0510	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0505	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0515	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0507	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0506	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0508	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0504	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0514	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0516	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0501	2026-05-13	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0503	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0511	2026-05-20	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0502	2026-05-20	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Splunk Enterprise versions 10.2.x ant\u00e9rieures \u00e0 10.2.3",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AI Toolkit versions 5.7.x ant\u00e9rieures \u00e0 5.7.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 9.3.2411 ant\u00e9rieures \u00e0 9.3.2411.129",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.3.2512 ant\u00e9rieures \u00e0 10.3.2512.9",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 10.2.x ant\u00e9rieures \u00e0 10.2.2",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.4.2603 ant\u00e9rieures \u00e0 10.4.2603.1",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Database Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Database Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 9.4.x ant\u00e9rieures \u00e0 9.4.10",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk User Behavior Analytics versions 5.4.x ant\u00e9rieures \u00e0 5.4.5",
      "product": {
        "name": "Splunk User Behavior Analytics (UBA)",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Private Synthetic Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Private Synthetic Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Analytics Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Analytics Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Cluster Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Machine Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Machine Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.2.2510 ant\u00e9rieures \u00e0 10.2.2510.11",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Python Agent versions ant\u00e9rieures \u00e0 26.4.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 10.0.x ant\u00e9rieures \u00e0 10.0.5",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Add-on for Tomcat versions 3.3.x ant\u00e9rieures \u00e0 3.3.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.1.2507 ant\u00e9rieures \u00e0 10.1.2507.21",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 10.0.x ant\u00e9rieures \u00e0 10.0.6",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Apache Web Server Agent versions 25.11.x ant\u00e9rieures \u00e0 25.11.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 9.4.x ant\u00e9rieures \u00e0 9.4.11",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "image Docker Splunk versions 9.3.x ant\u00e9rieures \u00e0 9.3.11",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Cloud Platform versions 10.0.2503 ant\u00e9rieures \u00e0 10.0.2503.13",
      "product": {
        "name": "Splunk Cloud Platform",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Universal Forwarder versions 9.4.x ant\u00e9rieures \u00e0 9.4.11",
      "product": {
        "name": "Universal Forwarder",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 9.3.x ant\u00e9rieures \u00e0 9.3.12",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AppDynamics Java Agent versions ant\u00e9rieures \u00e0 26.4.0",
      "product": {
        "name": "Splunk AppDynamics Java Agent",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-26007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
    },
    {
      "name": "CVE-2024-24790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24790"
    },
    {
      "name": "CVE-2025-58436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58436"
    },
    {
      "name": "CVE-2018-19361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19361"
    },
    {
      "name": "CVE-2023-0216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0216"
    },
    {
      "name": "CVE-2026-32777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32777"
    },
    {
      "name": "CVE-2025-61730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61730"
    },
    {
      "name": "CVE-2024-5321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5321"
    },
    {
      "name": "CVE-2019-17267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17267"
    },
    {
      "name": "CVE-2026-41324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41324"
    },
    {
      "name": "CVE-2024-1597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1597"
    },
    {
      "name": "CVE-2026-42308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42308"
    },
    {
      "name": "CVE-2023-0401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0401"
    },
    {
      "name": "CVE-2026-21933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21933"
    },
    {
      "name": "CVE-2025-29775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29775"
    },
    {
      "name": "CVE-2026-3543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3543"
    },
    {
      "name": "CVE-2026-21932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21932"
    },
    {
      "name": "CVE-2018-19362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19362"
    },
    {
      "name": "CVE-2025-66199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
    },
    {
      "name": "CVE-2025-15282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15282"
    },
    {
      "name": "CVE-2026-33871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
    },
    {
      "name": "CVE-2026-22737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22737"
    },
    {
      "name": "CVE-2023-43642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-43642"
    },
    {
      "name": "CVE-2025-68384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68384"
    },
    {
      "name": "CVE-2024-9681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9681"
    },
    {
      "name": "CVE-2025-58190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
    },
    {
      "name": "CVE-2025-68973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68973"
    },
    {
      "name": "CVE-2026-21637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21637"
    },
    {
      "name": "CVE-2024-37891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37891"
    },
    {
      "name": "CVE-2026-22801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22801"
    },
    {
      "name": "CVE-2026-42309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42309"
    },
    {
      "name": "CVE-2023-49082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49082"
    },
    {
      "name": "CVE-2023-1370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1370"
    },
    {
      "name": "CVE-2026-39892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
    },
    {
      "name": "CVE-2026-33186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
    },
    {
      "name": "CVE-2018-14719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14719"
    },
    {
      "name": "CVE-2024-4068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-4068"
    },
    {
      "name": "CVE-2025-22872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
    },
    {
      "name": "CVE-2025-29774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29774"
    },
    {
      "name": "CVE-2025-28164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-28164"
    },
    {
      "name": "CVE-2026-3540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3540"
    },
    {
      "name": "CVE-2024-10220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10220"
    },
    {
      "name": "CVE-2024-45339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45339"
    },
    {
      "name": "CVE-2020-9546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9546"
    },
    {
      "name": "CVE-2025-46762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46762"
    },
    {
      "name": "CVE-2023-37920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-37920"
    },
    {
      "name": "CVE-2025-68156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68156"
    },
    {
      "name": "CVE-2026-25990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25990"
    },
    {
      "name": "CVE-2026-32288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32288"
    },
    {
      "name": "CVE-2022-45868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45868"
    },
    {
      "name": "CVE-2025-69223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
    },
    {
      "name": "CVE-2025-47907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
    },
    {
      "name": "CVE-2020-10673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10673"
    },
    {
      "name": "CVE-2024-12797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12797"
    },
    {
      "name": "CVE-2025-30065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30065"
    },
    {
      "name": "CVE-2025-12084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12084"
    },
    {
      "name": "CVE-2024-12086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
    },
    {
      "name": "CVE-2024-25638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25638"
    },
    {
      "name": "CVE-2025-49146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49146"
    },
    {
      "name": "CVE-2026-34876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34876"
    },
    {
      "name": "CVE-2025-4432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4432"
    },
    {
      "name": "CVE-2023-5590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5590"
    },
    {
      "name": "CVE-2025-11468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11468"
    },
    {
      "name": "CVE-2020-36181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36181"
    },
    {
      "name": "CVE-2020-9548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9548"
    },
    {
      "name": "CVE-2020-36182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36182"
    },
    {
      "name": "CVE-2025-6069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
    },
    {
      "name": "CVE-2020-24616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-24616"
    },
    {
      "name": "CVE-2025-69419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
    },
    {
      "name": "CVE-2025-6075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6075"
    },
    {
      "name": "CVE-2026-27456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27456"
    },
    {
      "name": "CVE-2025-4330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4330"
    },
    {
      "name": "CVE-2025-58060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58060"
    },
    {
      "name": "CVE-2020-36185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36185"
    },
    {
      "name": "CVE-2023-50782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50782"
    },
    {
      "name": "CVE-2025-4138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4138"
    },
    {
      "name": "CVE-2025-61731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61731"
    },
    {
      "name": "CVE-2023-0215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
    },
    {
      "name": "CVE-2026-1605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1605"
    },
    {
      "name": "CVE-2022-25647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25647"
    },
    {
      "name": "CVE-2023-0286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
    },
    {
      "name": "CVE-2026-27143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27143"
    },
    {
      "name": "CVE-2024-47561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47561"
    },
    {
      "name": "CVE-2019-16942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16942"
    },
    {
      "name": "CVE-2026-3061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3061"
    },
    {
      "name": "CVE-2026-27171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27171"
    },
    {
      "name": "CVE-2020-9547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9547"
    },
    {
      "name": "CVE-2026-3731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3731"
    },
    {
      "name": "CVE-2020-36179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36179"
    },
    {
      "name": "CVE-2026-35469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
    },
    {
      "name": "CVE-2026-3062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3062"
    },
    {
      "name": "CVE-2018-14718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14718"
    },
    {
      "name": "CVE-2020-10650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10650"
    },
    {
      "name": "CVE-2024-24791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
    },
    {
      "name": "CVE-2026-1861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1861"
    },
    {
      "name": "CVE-2025-66516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66516"
    },
    {
      "name": "CVE-2023-4807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
    },
    {
      "name": "CVE-2023-2251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2251"
    },
    {
      "name": "CVE-2026-25833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25833"
    },
    {
      "name": "CVE-2024-13176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13176"
    },
    {
      "name": "CVE-2025-49844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49844"
    },
    {
      "name": "CVE-2020-36186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36186"
    },
    {
      "name": "CVE-2025-15467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
    },
    {
      "name": "CVE-2020-36189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36189"
    },
    {
      "name": "CVE-2024-58251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58251"
    },
    {
      "name": "CVE-2019-20444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
    },
    {
      "name": "CVE-2025-9820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9820"
    },
    {
      "name": "CVE-2020-35490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35490"
    },
    {
      "name": "CVE-2026-33870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
    },
    {
      "name": "CVE-2026-22690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22690"
    },
    {
      "name": "CVE-2025-55130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55130"
    },
    {
      "name": "CVE-2023-34454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34454"
    },
    {
      "name": "CVE-2022-46337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46337"
    },
    {
      "name": "CVE-2021-20190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20190"
    },
    {
      "name": "CVE-2021-35516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35516"
    },
    {
      "name": "CVE-2026-3544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3544"
    },
    {
      "name": "CVE-2024-12084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12084"
    },
    {
      "name": "CVE-2023-44487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
    },
    {
      "name": "CVE-2024-29857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29857"
    },
    {
      "name": "CVE-2020-13949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13949"
    },
    {
      "name": "CVE-2018-19360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19360"
    },
    {
      "name": "CVE-2026-2648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2648"
    },
    {
      "name": "CVE-2023-47627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-47627"
    },
    {
      "name": "CVE-2026-40200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40200"
    },
    {
      "name": "CVE-2024-13009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13009"
    },
    {
      "name": "CVE-2026-27025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27025"
    },
    {
      "name": "CVE-2025-55131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55131"
    },
    {
      "name": "CVE-2026-32778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32778"
    },
    {
      "name": "CVE-2026-5121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
    },
    {
      "name": "CVE-2024-12798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12798"
    },
    {
      "name": "CVE-2025-0938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0938"
    },
    {
      "name": "CVE-2025-27210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27210"
    },
    {
      "name": "CVE-2019-16335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16335"
    },
    {
      "name": "CVE-2023-34453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34453"
    },
    {
      "name": "CVE-2022-40149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40149"
    },
    {
      "name": "CVE-2024-41996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41996"
    },
    {
      "name": "CVE-2025-50106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
    },
    {
      "name": "CVE-2025-59465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59465"
    },
    {
      "name": "CVE-2023-3635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3635"
    },
    {
      "name": "CVE-2026-21715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21715"
    },
    {
      "name": "CVE-2020-1971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
    },
    {
      "name": "CVE-2026-34073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34073"
    },
    {
      "name": "CVE-2026-27144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27144"
    },
    {
      "name": "CVE-2018-7489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7489"
    },
    {
      "name": "CVE-2025-58057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58057"
    },
    {
      "name": "CVE-2025-8291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8291"
    },
    {
      "name": "CVE-2026-22795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
    },
    {
      "name": "CVE-2026-32283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
    },
    {
      "name": "CVE-2019-14893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14893"
    },
    {
      "name": "CVE-2019-10202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10202"
    },
    {
      "name": "CVE-2026-25834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25834"
    },
    {
      "name": "CVE-2026-21925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21925"
    },
    {
      "name": "CVE-2026-3537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3537"
    },
    {
      "name": "CVE-2024-34158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34158"
    },
    {
      "name": "CVE-2025-30754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
    },
    {
      "name": "CVE-2025-69225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69225"
    },
    {
      "name": "CVE-2025-62718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
    },
    {
      "name": "CVE-2026-27024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27024"
    },
    {
      "name": "CVE-2023-0217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0217"
    },
    {
      "name": "CVE-2021-35517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35517"
    },
    {
      "name": "CVE-2026-4424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
    },
    {
      "name": "CVE-2025-67030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67030"
    },
    {
      "name": "CVE-2026-34877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34877"
    },
    {
      "name": "CVE-2026-32281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
    },
    {
      "name": "CVE-2026-27142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27142"
    },
    {
      "name": "CVE-2026-28389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28389"
    },
    {
      "name": "CVE-2021-23358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23358"
    },
    {
      "name": "CVE-2025-31133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31133"
    },
    {
      "name": "CVE-2025-8194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
    },
    {
      "name": "CVE-2024-11053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
    },
    {
      "name": "CVE-2024-7264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7264"
    },
    {
      "name": "CVE-2026-34875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34875"
    },
    {
      "name": "CVE-2026-21717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21717"
    },
    {
      "name": "CVE-2025-64505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64505"
    },
    {
      "name": "CVE-2025-69227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
    },
    {
      "name": "CVE-2025-50181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
    },
    {
      "name": "CVE-2020-10672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10672"
    },
    {
      "name": "CVE-2022-3510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3510"
    },
    {
      "name": "CVE-2022-3509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3509"
    },
    {
      "name": "CVE-2025-1795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
    },
    {
      "name": "CVE-2021-28165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28165"
    },
    {
      "name": "CVE-2025-69421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
    },
    {
      "name": "CVE-2021-37137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37137"
    },
    {
      "name": "CVE-2019-14439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14439"
    },
    {
      "name": "CVE-2025-4517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4517"
    },
    {
      "name": "CVE-2025-58188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58188"
    },
    {
      "name": "CVE-2026-34478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
    },
    {
      "name": "CVE-2026-33055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33055"
    },
    {
      "name": "CVE-2025-4674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
    },
    {
      "name": "CVE-2025-4565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4565"
    },
    {
      "name": "CVE-2025-11143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11143"
    },
    {
      "name": "CVE-2026-34480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
    },
    {
      "name": "CVE-2017-7658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7658"
    },
    {
      "name": "CVE-2026-27699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27699"
    },
    {
      "name": "CVE-2022-40150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40150"
    },
    {
      "name": "CVE-2025-47911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
    },
    {
      "name": "CVE-2025-28162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-28162"
    },
    {
      "name": "CVE-2023-22946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22946"
    },
    {
      "name": "CVE-2026-33228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33228"
    },
    {
      "name": "CVE-2020-36187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36187"
    },
    {
      "name": "CVE-2026-40175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
    },
    {
      "name": "CVE-2025-13151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13151"
    },
    {
      "name": "CVE-2025-4435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4435"
    },
    {
      "name": "CVE-2024-21634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21634"
    },
    {
      "name": "CVE-2021-36090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-36090"
    },
    {
      "name": "CVE-2026-21716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21716"
    },
    {
      "name": "CVE-2025-64506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64506"
    },
    {
      "name": "CVE-2024-53899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-53899"
    },
    {
      "name": "CVE-2025-68161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
    },
    {
      "name": "CVE-2026-28351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28351"
    },
    {
      "name": "CVE-2025-52881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
    },
    {
      "name": "CVE-2023-34455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34455"
    },
    {
      "name": "CVE-2024-5535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5535"
    },
    {
      "name": "CVE-2024-29131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29131"
    },
    {
      "name": "CVE-2025-22868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
    },
    {
      "name": "CVE-2025-14174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14174"
    },
    {
      "name": "CVE-2024-12718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12718"
    },
    {
      "name": "CVE-2026-22796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
    },
    {
      "name": "CVE-2025-64720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64720"
    },
    {
      "name": "CVE-2024-30251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30251"
    },
    {
      "name": "CVE-2020-11620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11620"
    },
    {
      "name": "CVE-2026-2650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2650"
    },
    {
      "name": "CVE-2026-3541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3541"
    },
    {
      "name": "CVE-2024-12801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12801"
    },
    {
      "name": "CVE-2021-37136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37136"
    },
    {
      "name": "CVE-2018-12022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12022"
    },
    {
      "name": "CVE-2026-3539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3539"
    },
    {
      "name": "CVE-2026-34874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34874"
    },
    {
      "name": "CVE-2026-21712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21712"
    },
    {
      "name": "CVE-2018-5968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5968"
    },
    {
      "name": "CVE-2025-61732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61732"
    },
    {
      "name": "CVE-2024-27306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27306"
    },
    {
      "name": "CVE-2025-61723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61723"
    },
    {
      "name": "CVE-2025-9232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9232"
    },
    {
      "name": "CVE-2024-8775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8775"
    },
    {
      "name": "CVE-2026-3538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3538"
    },
    {
      "name": "CVE-2025-55159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55159"
    },
    {
      "name": "CVE-2025-55132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55132"
    },
    {
      "name": "CVE-2026-22702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22702"
    },
    {
      "name": "CVE-2025-46394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46394"
    },
    {
      "name": "CVE-2025-66471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
    },
    {
      "name": "CVE-2020-24750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-24750"
    },
    {
      "name": "CVE-2026-25679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
    },
    {
      "name": "CVE-2026-21441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
    },
    {
      "name": "CVE-2024-45337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
    },
    {
      "name": "CVE-2025-13836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13836"
    },
    {
      "name": "CVE-2023-39410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39410"
    },
    {
      "name": "CVE-2025-68390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68390"
    },
    {
      "name": "CVE-2024-11079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-11079"
    },
    {
      "name": "CVE-2026-22732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22732"
    },
    {
      "name": "CVE-2025-61725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61725"
    },
    {
      "name": "CVE-2026-25210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25210"
    },
    {
      "name": "CVE-2026-28387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28387"
    },
    {
      "name": "CVE-2025-65018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65018"
    },
    {
      "name": "CVE-2026-28388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28388"
    },
    {
      "name": "CVE-2026-40192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
    },
    {
      "name": "CVE-2025-66293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66293"
    },
    {
      "name": "CVE-2024-35195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35195"
    },
    {
      "name": "CVE-2019-16943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16943"
    },
    {
      "name": "CVE-2026-32289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32289"
    },
    {
      "name": "CVE-2026-0865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0865"
    },
    {
      "name": "CVE-2026-21714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21714"
    },
    {
      "name": "CVE-2024-12087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12087"
    },
    {
      "name": "CVE-2017-7525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7525"
    },
    {
      "name": "CVE-2026-4111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
    },
    {
      "name": "CVE-2026-24515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24515"
    },
    {
      "name": "CVE-2024-26130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26130"
    },
    {
      "name": "CVE-2019-20330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20330"
    },
    {
      "name": "CVE-2024-41110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41110"
    },
    {
      "name": "CVE-2025-50059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
    },
    {
      "name": "CVE-2026-2441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2441"
    },
    {
      "name": "CVE-2020-14195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14195"
    },
    {
      "name": "CVE-2025-69228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
    },
    {
      "name": "CVE-2024-34156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
    },
    {
      "name": "CVE-2020-35491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35491"
    },
    {
      "name": "CVE-2019-17531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17531"
    },
    {
      "name": "CVE-2025-1948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1948"
    },
    {
      "name": "CVE-2026-32280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
    },
    {
      "name": "CVE-2025-27553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27553"
    },
    {
      "name": "CVE-2025-30761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
    },
    {
      "name": "CVE-2022-4450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
    },
    {
      "name": "CVE-2026-27888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27888"
    },
    {
      "name": "CVE-2024-7592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7592"
    },
    {
      "name": "CVE-2026-33056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33056"
    },
    {
      "name": "CVE-2026-25835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25835"
    },
    {
      "name": "CVE-2025-68160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
    },
    {
      "name": "CVE-2022-3996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3996"
    },
    {
      "name": "CVE-2020-14061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14061"
    },
    {
      "name": "CVE-2025-52565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52565"
    },
    {
      "name": "CVE-2017-7657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7657"
    },
    {
      "name": "CVE-2025-67735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67735"
    },
    {
      "name": "CVE-2025-61728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
    },
    {
      "name": "CVE-2026-0965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0965"
    },
    {
      "name": "CVE-2020-36242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242"
    },
    {
      "name": "CVE-2022-42004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42004"
    },
    {
      "name": "CVE-2022-40023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40023"
    },
    {
      "name": "CVE-2020-11619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11619"
    },
    {
      "name": "CVE-2025-9086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9086"
    },
    {
      "name": "CVE-2026-34872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34872"
    },
    {
      "name": "CVE-2025-58187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58187"
    },
    {
      "name": "CVE-2024-29371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29371"
    },
    {
      "name": "CVE-2020-36183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36183"
    },
    {
      "name": "CVE-2026-3542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3542"
    },
    {
      "name": "CVE-2023-49081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49081"
    },
    {
      "name": "CVE-2020-8840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8840"
    },
    {
      "name": "CVE-2026-34871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34871"
    },
    {
      "name": "CVE-2025-22871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22871"
    },
    {
      "name": "CVE-2025-69226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69226"
    },
    {
      "name": "CVE-2026-3536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3536"
    },
    {
      "name": "CVE-2026-28390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
    },
    {
      "name": "CVE-2019-0205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0205"
    },
    {
      "name": "CVE-2024-32650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-32650"
    },
    {
      "name": "CVE-2026-34873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34873"
    },
    {
      "name": "CVE-2026-6042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6042"
    },
    {
      "name": "CVE-2024-47081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47081"
    },
    {
      "name": "CVE-2019-10172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10172"
    },
    {
      "name": "CVE-2025-47913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47913"
    },
    {
      "name": "CVE-2024-55549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-55549"
    },
    {
      "name": "CVE-2024-0397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0397"
    },
    {
      "name": "CVE-2020-36184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36184"
    },
    {
      "name": "CVE-2026-0967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0967"
    },
    {
      "name": "CVE-2025-69418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
    },
    {
      "name": "CVE-2025-4516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
    },
    {
      "name": "CVE-2025-22869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
    },
    {
      "name": "CVE-2025-59466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59466"
    },
    {
      "name": "CVE-2025-15468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
    },
    {
      "name": "CVE-2026-25639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
    },
    {
      "name": "CVE-2026-21713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21713"
    },
    {
      "name": "CVE-2020-36180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36180"
    },
    {
      "name": "CVE-2018-12023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12023"
    },
    {
      "name": "CVE-2026-0968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0968"
    },
    {
      "name": "CVE-2026-27140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27140"
    },
    {
      "name": "CVE-2018-14720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14720"
    },
    {
      "name": "CVE-2024-52304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52304"
    },
    {
      "name": "CVE-2020-36518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36518"
    },
    {
      "name": "CVE-2026-21945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21945"
    },
    {
      "name": "CVE-2023-5408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5408"
    },
    {
      "name": "CVE-2025-69277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69277"
    },
    {
      "name": "CVE-2026-25541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25541"
    },
    {
      "name": "CVE-2026-31789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31789"
    },
    {
      "name": "CVE-2026-22735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22735"
    },
    {
      "name": "CVE-2026-42311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42311"
    },
    {
      "name": "CVE-2026-20239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20239"
    },
    {
      "name": "CVE-2025-24855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24855"
    },
    {
      "name": "CVE-2026-3063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3063"
    },
    {
      "name": "CVE-2019-0210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0210"
    },
    {
      "name": "CVE-2025-30749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
    },
    {
      "name": "CVE-2024-27308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27308"
    },
    {
      "name": "CVE-2026-42310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42310"
    },
    {
      "name": "CVE-2026-22695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22695"
    },
    {
      "name": "CVE-2026-27139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27139"
    },
    {
      "name": "CVE-2026-20240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20240"
    },
    {
      "name": "CVE-2023-49083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49083"
    },
    {
      "name": "CVE-2017-15095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15095"
    },
    {
      "name": "CVE-2019-14540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14540"
    },
    {
      "name": "CVE-2024-36114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36114"
    },
    {
      "name": "CVE-2019-12086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12086"
    },
    {
      "name": "CVE-2018-14721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14721"
    },
    {
      "name": "CVE-2025-48924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
    },
    {
      "name": "CVE-2026-33810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
    },
    {
      "name": "CVE-2025-66566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66566"
    },
    {
      "name": "CVE-2025-11187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
    },
    {
      "name": "CVE-2017-7656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7656"
    },
    {
      "name": "CVE-2026-27026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27026"
    },
    {
      "name": "CVE-2026-2673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2673"
    },
    {
      "name": "CVE-2018-20225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20225"
    },
    {
      "name": "CVE-2026-32282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
    },
    {
      "name": "CVE-2018-11307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-11307"
    },
    {
      "name": "CVE-2024-3651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-3651"
    },
    {
      "name": "CVE-2025-68121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
    },
    {
      "name": "CVE-2024-12088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12088"
    },
    {
      "name": "CVE-2025-14819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14819"
    },
    {
      "name": "CVE-2022-42003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42003"
    },
    {
      "name": "CVE-2020-25649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25649"
    },
    {
      "name": "CVE-2026-27141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27141"
    },
    {
      "name": "CVE-2023-2976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2976"
    },
    {
      "name": "CVE-2025-61726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
    },
    {
      "name": "CVE-2017-17485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17485"
    },
    {
      "name": "CVE-2026-1584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1584"
    },
    {
      "name": "CVE-2026-20238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20238"
    },
    {
      "name": "CVE-2024-23829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23829"
    },
    {
      "name": "CVE-2025-59464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59464"
    },
    {
      "name": "CVE-2025-30153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30153"
    },
    {
      "name": "CVE-2026-32141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
    },
    {
      "name": "CVE-2019-14379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14379"
    },
    {
      "name": "CVE-2025-69229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69229"
    },
    {
      "name": "CVE-2021-35515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35515"
    },
    {
      "name": "CVE-2026-3545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3545"
    },
    {
      "name": "CVE-2025-30204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30204"
    },
    {
      "name": "CVE-2026-28804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28804"
    },
    {
      "name": "CVE-2026-34477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
    },
    {
      "name": "CVE-2025-53057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53057"
    },
    {
      "name": "CVE-2022-3171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3171"
    },
    {
      "name": "CVE-2026-2649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2649"
    },
    {
      "name": "CVE-2024-39689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39689"
    },
    {
      "name": "CVE-2025-37731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37731"
    },
    {
      "name": "CVE-2026-24688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24688"
    },
    {
      "name": "CVE-2026-32776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32776"
    },
    {
      "name": "CVE-2025-12183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12183"
    },
    {
      "name": "CVE-2019-16869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869"
    },
    {
      "name": "CVE-2025-68119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68119"
    },
    {
      "name": "CVE-2025-7338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7338"
    },
    {
      "name": "CVE-2022-23491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23491"
    },
    {
      "name": "CVE-2025-53066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53066"
    },
    {
      "name": "CVE-2026-22691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22691"
    },
    {
      "name": "CVE-2026-27628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27628"
    },
    {
      "name": "CVE-2025-69420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
    },
    {
      "name": "CVE-2025-47273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
    },
    {
      "name": "CVE-2026-1225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1225"
    },
    {
      "name": "CVE-2020-14060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14060"
    },
    {
      "name": "CVE-2026-31790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
    },
    {
      "name": "CVE-2020-36188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36188"
    },
    {
      "name": "CVE-2025-61729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
    },
    {
      "name": "CVE-2024-6345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
    },
    {
      "name": "CVE-2025-14831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14831"
    },
    {
      "name": "CVE-2024-23334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23334"
    },
    {
      "name": "CVE-2019-14892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14892"
    },
    {
      "name": "CVE-2026-21710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21710"
    },
    {
      "name": "CVE-2025-66418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
    },
    {
      "name": "CVE-2019-20445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
    },
    {
      "name": "CVE-2025-11226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11226"
    },
    {
      "name": "CVE-2020-14062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14062"
    }
  ],
  "initial_release_date": "2026-05-21T00:00:00",
  "last_revision_date": "2026-05-21T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0627",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Splunk. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Splunk",
  "vendor_advisories": [
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0512",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0512"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0513",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0513"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0509",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0509"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0510",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0510"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0505",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0505"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0515",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0515"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0507",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0507"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0506",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0506"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0508",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0508"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0504",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0504"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0514",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0514"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0516",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0516"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0501",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0501"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0503",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0503"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0511",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0511"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0502",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0502"
    }
  ]
}

cleanstart-2026-en66750

Vulnerability from cleanstart

Published

2026-06-10 00:46

Modified

2026-06-09 08:06

Summary

Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing

Details

Multiple security vulnerabilities affect the apache-superset package. Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. See references for individual vulnerability details.

Severity

9.8 (Critical)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://github.com/cleanstart-dev/cleanstart-secu…	ADVISORY
	https://osv.dev/vulnerability/CVE-2026-25990	WEB
	https://osv.dev/vulnerability/CVE-2026-40192	WEB
	https://osv.dev/vulnerability/CVE-2026-42308	WEB
	https://osv.dev/vulnerability/CVE-2026-42309	WEB
	https://osv.dev/vulnerability/CVE-2026-42310	WEB
	https://osv.dev/vulnerability/CVE-2026-42311	WEB
	https://osv.dev/vulnerability/CVE-2026-45409	WEB
	https://osv.dev/vulnerability/CVE-2026-48522	WEB
	https://osv.dev/vulnerability/CVE-2026-48524	WEB
	https://osv.dev/vulnerability/CVE-2026-48525	WEB
	https://osv.dev/vulnerability/CVE-2026-48526	WEB
	https://osv.dev/vulnerability/ghsa-5xmw-vc9v-4wf2	WEB
	https://osv.dev/vulnerability/ghsa-65pc-fj4g-8rjx	WEB
	https://osv.dev/vulnerability/ghsa-cfh3-3jmp-rvhc	WEB
	https://osv.dev/vulnerability/ghsa-pwv6-vv43-88gr	WEB
	https://osv.dev/vulnerability/ghsa-r73j-pqj5-w3x7	WEB
	https://osv.dev/vulnerability/ghsa-whj4-6x5x-4v2j	WEB
	https://osv.dev/vulnerability/ghsa-wjx4-4jcj-g98j	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-25990	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-40192	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42308	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42309	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42310	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42311	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-45409	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48522	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48524	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48525	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48526	WEB

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "apache-superset"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-r5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Multiple security vulnerabilities affect the apache-superset package. Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. See references for individual vulnerability details.",
  "id": "CLEANSTART-2026-EN66750",
  "modified": "2026-06-09T08:06:55Z",
  "published": "2026-06-10T00:46:54.779122Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EN66750.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25990"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-40192"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42308"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42309"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42310"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42311"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-45409"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48522"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48524"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48525"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48526"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-5xmw-vc9v-4wf2"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-65pc-fj4g-8rjx"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-cfh3-3jmp-rvhc"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-pwv6-vv43-88gr"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-r73j-pqj5-w3x7"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-whj4-6x5x-4v2j"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-wjx4-4jcj-g98j"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25990"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42309"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42310"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45409"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48522"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48524"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48525"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing",
  "upstream": [
    "CVE-2026-25990",
    "CVE-2026-40192",
    "CVE-2026-42308",
    "CVE-2026-42309",
    "CVE-2026-42310",
    "CVE-2026-42311",
    "CVE-2026-45409",
    "CVE-2026-48522",
    "CVE-2026-48524",
    "CVE-2026-48525",
    "CVE-2026-48526",
    "ghsa-5xmw-vc9v-4wf2",
    "ghsa-65pc-fj4g-8rjx",
    "ghsa-cfh3-3jmp-rvhc",
    "ghsa-pwv6-vv43-88gr",
    "ghsa-r73j-pqj5-w3x7",
    "ghsa-whj4-6x5x-4v2j",
    "ghsa-wjx4-4jcj-g98j"
  ]
}

cleanstart-2026-fg72002

Vulnerability from cleanstart

Published

2026-07-13 06:29

Modified

2026-06-09 08:06

Summary

Security fixes for CVE-2026-25990, CVE-2026-40192, CVE-2026-42308, CVE-2026-42309, CVE-2026-42310, CVE-2026-42311, CVE-2026-45409, CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-5xmw-vc9v-4wf2, ghsa-65pc-fj4g-8rjx, ghsa-cfh3-3jmp-rvhc, ghsa-pwv6-vv43-88gr, ghsa-r73j-pqj5-w3x7, ghsa-whj4-6x5x-4v2j, ghsa-wjx4-4jcj-g98j applied in versions: 6.0.0-r5

Details

Multiple security vulnerabilities affect the apache-superset package. These issues are resolved in later releases. See references for individual vulnerability details.

References

URL

Type

	https://github.com/cleanstart-dev/cleanstart-secu…	ADVISORY
	https://osv.dev/vulnerability/CVE-2026-25990	WEB
	https://osv.dev/vulnerability/CVE-2026-40192	WEB
	https://osv.dev/vulnerability/CVE-2026-42308	WEB
	https://osv.dev/vulnerability/CVE-2026-42309	WEB
	https://osv.dev/vulnerability/CVE-2026-42310	WEB
	https://osv.dev/vulnerability/CVE-2026-42311	WEB
	https://osv.dev/vulnerability/CVE-2026-45409	WEB
	https://osv.dev/vulnerability/CVE-2026-48522	WEB
	https://osv.dev/vulnerability/CVE-2026-48524	WEB
	https://osv.dev/vulnerability/CVE-2026-48525	WEB
	https://osv.dev/vulnerability/CVE-2026-48526	WEB
	https://osv.dev/vulnerability/ghsa-5xmw-vc9v-4wf2	WEB
	https://osv.dev/vulnerability/ghsa-65pc-fj4g-8rjx	WEB
	https://osv.dev/vulnerability/ghsa-cfh3-3jmp-rvhc	WEB
	https://osv.dev/vulnerability/ghsa-pwv6-vv43-88gr	WEB
	https://osv.dev/vulnerability/ghsa-r73j-pqj5-w3x7	WEB
	https://osv.dev/vulnerability/ghsa-whj4-6x5x-4v2j	WEB
	https://osv.dev/vulnerability/ghsa-wjx4-4jcj-g98j	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-25990	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-40192	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42308	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42309	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42310	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42311	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-45409	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48522	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48524	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48525	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48526	WEB

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "apache-superset"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-r5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Multiple security vulnerabilities affect the apache-superset package. These issues are resolved in later releases. See references for individual vulnerability details.",
  "id": "CLEANSTART-2026-FG72002",
  "modified": "2026-06-09T08:06:55Z",
  "published": "2026-07-13T06:29:31.585527Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FG72002.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25990"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-40192"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42308"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42309"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42310"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42311"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-45409"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48522"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48524"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48525"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48526"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-5xmw-vc9v-4wf2"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-65pc-fj4g-8rjx"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-cfh3-3jmp-rvhc"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-pwv6-vv43-88gr"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-r73j-pqj5-w3x7"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-whj4-6x5x-4v2j"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-wjx4-4jcj-g98j"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25990"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42309"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42310"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45409"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48522"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48524"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48525"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "summary": "Security fixes for CVE-2026-25990, CVE-2026-40192, CVE-2026-42308, CVE-2026-42309, CVE-2026-42310, CVE-2026-42311, CVE-2026-45409, CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-5xmw-vc9v-4wf2, ghsa-65pc-fj4g-8rjx, ghsa-cfh3-3jmp-rvhc, ghsa-pwv6-vv43-88gr, ghsa-r73j-pqj5-w3x7, ghsa-whj4-6x5x-4v2j, ghsa-wjx4-4jcj-g98j applied in versions: 6.0.0-r5",
  "upstream": [
    "CVE-2026-25990",
    "CVE-2026-40192",
    "CVE-2026-42308",
    "CVE-2026-42309",
    "CVE-2026-42310",
    "CVE-2026-42311",
    "CVE-2026-45409",
    "CVE-2026-48522",
    "CVE-2026-48524",
    "CVE-2026-48525",
    "CVE-2026-48526",
    "ghsa-5xmw-vc9v-4wf2",
    "ghsa-65pc-fj4g-8rjx",
    "ghsa-cfh3-3jmp-rvhc",
    "ghsa-pwv6-vv43-88gr",
    "ghsa-r73j-pqj5-w3x7",
    "ghsa-whj4-6x5x-4v2j",
    "ghsa-wjx4-4jcj-g98j"
  ]
}

cleanstart-2026-rf67070

Vulnerability from cleanstart

Published

2026-07-09 09:36

Modified

2026-06-09 08:06

Summary

Security fixes for CVE-2026-25990, CVE-2026-40192, CVE-2026-42308, CVE-2026-42309, CVE-2026-42310, CVE-2026-42311, CVE-2026-45409, CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-5xmw-vc9v-4wf2, ghsa-65pc-fj4g-8rjx, ghsa-cfh3-3jmp-rvhc, ghsa-pwv6-vv43-88gr, ghsa-r73j-pqj5-w3x7, ghsa-whj4-6x5x-4v2j, ghsa-wjx4-4jcj-g98j applied in versions: 6.0.0-r5

Details

Multiple security vulnerabilities affect the apache-superset package. These issues are resolved in later releases. See references for individual vulnerability details.

References

URL

Type

	https://github.com/cleanstart-dev/cleanstart-secu…	ADVISORY
	https://osv.dev/vulnerability/CVE-2026-25990	WEB
	https://osv.dev/vulnerability/CVE-2026-40192	WEB
	https://osv.dev/vulnerability/CVE-2026-42308	WEB
	https://osv.dev/vulnerability/CVE-2026-42309	WEB
	https://osv.dev/vulnerability/CVE-2026-42310	WEB
	https://osv.dev/vulnerability/CVE-2026-42311	WEB
	https://osv.dev/vulnerability/CVE-2026-45409	WEB
	https://osv.dev/vulnerability/CVE-2026-48522	WEB
	https://osv.dev/vulnerability/CVE-2026-48524	WEB
	https://osv.dev/vulnerability/CVE-2026-48525	WEB
	https://osv.dev/vulnerability/CVE-2026-48526	WEB
	https://osv.dev/vulnerability/ghsa-5xmw-vc9v-4wf2	WEB
	https://osv.dev/vulnerability/ghsa-65pc-fj4g-8rjx	WEB
	https://osv.dev/vulnerability/ghsa-cfh3-3jmp-rvhc	WEB
	https://osv.dev/vulnerability/ghsa-pwv6-vv43-88gr	WEB
	https://osv.dev/vulnerability/ghsa-r73j-pqj5-w3x7	WEB
	https://osv.dev/vulnerability/ghsa-whj4-6x5x-4v2j	WEB
	https://osv.dev/vulnerability/ghsa-wjx4-4jcj-g98j	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-25990	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-40192	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42308	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42309	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42310	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-42311	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-45409	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48522	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48524	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48525	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-48526	WEB

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "apache-superset"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-r5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Multiple security vulnerabilities affect the apache-superset package. These issues are resolved in later releases. See references for individual vulnerability details.",
  "id": "CLEANSTART-2026-RF67070",
  "modified": "2026-06-09T08:06:55Z",
  "published": "2026-07-09T09:36:58.184272Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RF67070.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25990"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-40192"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42308"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42309"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42310"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42311"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-45409"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48522"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48524"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48525"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-48526"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-5xmw-vc9v-4wf2"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-65pc-fj4g-8rjx"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-cfh3-3jmp-rvhc"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-pwv6-vv43-88gr"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-r73j-pqj5-w3x7"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-whj4-6x5x-4v2j"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/ghsa-wjx4-4jcj-g98j"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25990"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42309"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42310"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45409"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48522"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48524"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48525"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "summary": "Security fixes for CVE-2026-25990, CVE-2026-40192, CVE-2026-42308, CVE-2026-42309, CVE-2026-42310, CVE-2026-42311, CVE-2026-45409, CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-5xmw-vc9v-4wf2, ghsa-65pc-fj4g-8rjx, ghsa-cfh3-3jmp-rvhc, ghsa-pwv6-vv43-88gr, ghsa-r73j-pqj5-w3x7, ghsa-whj4-6x5x-4v2j, ghsa-wjx4-4jcj-g98j applied in versions: 6.0.0-r5",
  "upstream": [
    "CVE-2026-25990",
    "CVE-2026-40192",
    "CVE-2026-42308",
    "CVE-2026-42309",
    "CVE-2026-42310",
    "CVE-2026-42311",
    "CVE-2026-45409",
    "CVE-2026-48522",
    "CVE-2026-48524",
    "CVE-2026-48525",
    "CVE-2026-48526",
    "ghsa-5xmw-vc9v-4wf2",
    "ghsa-65pc-fj4g-8rjx",
    "ghsa-cfh3-3jmp-rvhc",
    "ghsa-pwv6-vv43-88gr",
    "ghsa-r73j-pqj5-w3x7",
    "ghsa-whj4-6x5x-4v2j",
    "ghsa-wjx4-4jcj-g98j"
  ]
}

FKIE_CVE-2026-42311

Vulnerability from fkie_nvd - Published: 2026-05-09 06:16 - Updated: 2026-06-17 10:47

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.

References

URL	Tags
security-advisories@github.com	https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea	Patch
security-advisories@github.com	https://github.com/python-pillow/Pillow/pull/9520	Issue Tracking, Patch
security-advisories@github.com	https://github.com/python-pillow/Pillow/releases/tag/12.2.0	Product, Release Notes
security-advisories@github.com	https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr	Patch, Vendor Advisory

Impacted products

	Vendor	Product	Version
	python	pillow	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Pillow",
          "vendor": "python-pillow",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 10.3.0, \u003c 12.2.0"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F722B42F-A7FE-443E-87A2-4BCD3EFE3180",
              "versionEndExcluding": "12.2.0",
              "versionStartIncluding": "10.3.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0."
    }
  ],
  "id": "CVE-2026-42311",
  "lastModified": "2026-06-17T10:47:40.520",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.6,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-42311",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-05-12T02:24:20.356743Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-05-09T06:16:10.430",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/python-pillow/Pillow/pull/9520"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Product",
        "Release Notes"
      ],
      "url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        },
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

GHSA-PWV6-VV43-88GR

Vulnerability from github – Published: 2026-05-04 20:20 – Updated: 2026-05-13 13:41

Summary

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Details

Impact

Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.

Patches

Patched version: 12.2.0

Pillow 12.1.1 addressed CVE-2026-25990 by adding checks for tile extents in PSD image decoding/encoding to prevent an out-of-bounds write. However, the bounds checks computed tile extent sums using types susceptible to integer overflow, meaning a PSD image with carefully chosen tile dimensions could produce values that wrap around and bypass the checks, still triggering an out-of-bounds write in src/decode.c and src/encode.c. The fix avoids adding extents together before comparison.

Workarounds

Use any version but affected versions: >= 10.3.0, < 12.2.0

Resources

Fix: https://github.com/python-pillow/Pillow/pull/9520
Original issue: CVE-2026-25990 (Pillow 12.1.1)

Severity

8.6 (High)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "pillow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "10.3.0"
            },
            {
              "fixed": "12.2.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-42311"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-190",
      "CWE-787"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-05-04T20:20:31Z",
    "nvd_published_at": "2026-05-09T06:16:10Z",
    "severity": "HIGH"
  },
  "details": "### Impact\nProcessing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.\n\n### Patches\nPatched version: 12.2.0\n\nPillow 12.1.1 addressed CVE-2026-25990 by adding checks for tile extents in PSD image decoding/encoding to prevent an out-of-bounds write. However, the bounds checks computed tile extent sums using types susceptible to integer overflow, meaning a PSD image with carefully chosen tile dimensions could produce values that wrap around and bypass the checks, still triggering an out-of-bounds write in src/decode.c and src/encode.c. The fix avoids adding extents together before comparison.\n\n### Workarounds\nUse any version but affected versions: \u003e= 10.3.0, \u003c 12.2.0\n\n### Resources\n - Fix: https://github.com/python-pillow/Pillow/pull/9520 \n - Original issue: CVE-2026-25990 (Pillow 12.1.1)",
  "id": "GHSA-pwv6-vv43-88gr",
  "modified": "2026-05-13T13:41:29Z",
  "published": "2026-05-04T20:20:31Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/pull/9520"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/python-pillow/Pillow"
    },
    {
      "type": "WEB",
      "url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)"
}

OPENSUSE-SU-2026:11261-1

Vulnerability from csaf_opensuse - Published: 2026-07-12 00:00 - Updated: 2026-07-12 00:00

Summary

python313-Pillow-12.3.0-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: python313-Pillow-12.3.0-1.1 on GA media

Description of the patch: These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-11261

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2014-3589

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2014-3598

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2016-0740

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2016-0775

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2016-3076

5.5 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2020-15999

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2020-35653

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2020-35654

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2020-35655

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2021-23437

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2021-25289

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact critical

CVE-2021-25290

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2021-25291

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2021-25292

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2021-25293

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2021-27921

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2021-34552

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2023-44271

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2023-50447

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2024-28219

7.3 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-42311

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-4775

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-54059

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-55379

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64	—	Vendor Fix

Threats

Impact important

References

80 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2014-3589/	self
https://www.suse.com/security/cve/CVE-2014-3598/	self
https://www.suse.com/security/cve/CVE-2016-0740/	self
https://www.suse.com/security/cve/CVE-2016-0775/	self
https://www.suse.com/security/cve/CVE-2016-3076/	self
https://www.suse.com/security/cve/CVE-2020-15999/	self
https://www.suse.com/security/cve/CVE-2020-35653/	self
https://www.suse.com/security/cve/CVE-2020-35654/	self
https://www.suse.com/security/cve/CVE-2020-35655/	self
https://www.suse.com/security/cve/CVE-2021-23437/	self
https://www.suse.com/security/cve/CVE-2021-25289/	self
https://www.suse.com/security/cve/CVE-2021-25290/	self
https://www.suse.com/security/cve/CVE-2021-25291/	self
https://www.suse.com/security/cve/CVE-2021-25292/	self
https://www.suse.com/security/cve/CVE-2021-25293/	self
https://www.suse.com/security/cve/CVE-2021-27921/	self
https://www.suse.com/security/cve/CVE-2021-34552/	self
https://www.suse.com/security/cve/CVE-2023-44271/	self
https://www.suse.com/security/cve/CVE-2023-50447/	self
https://www.suse.com/security/cve/CVE-2024-28219/	self
https://www.suse.com/security/cve/CVE-2026-42311/	self
https://www.suse.com/security/cve/CVE-2026-4775/	self
https://www.suse.com/security/cve/CVE-2026-54059/	self
https://www.suse.com/security/cve/CVE-2026-55379/	self
https://www.suse.com/security/cve/CVE-2014-3589	external
https://bugzilla.suse.com/921566	external
https://www.suse.com/security/cve/CVE-2014-3598	external
https://bugzilla.suse.com/921566	external
https://www.suse.com/security/cve/CVE-2016-0740	external
https://bugzilla.suse.com/965579	external
https://bugzilla.suse.com/965582	external
https://www.suse.com/security/cve/CVE-2016-0775	external
https://bugzilla.suse.com/965579	external
https://bugzilla.suse.com/965582	external
https://www.suse.com/security/cve/CVE-2016-3076	external
https://bugzilla.suse.com/973786	external
https://www.suse.com/security/cve/CVE-2020-15999	external
https://bugzilla.suse.com/1177914	external
https://bugzilla.suse.com/1177936	external
https://bugzilla.suse.com/1178824	external
https://bugzilla.suse.com/1178894	external
https://www.suse.com/security/cve/CVE-2020-35653	external
https://bugzilla.suse.com/1180834	external
https://www.suse.com/security/cve/CVE-2020-35654	external
https://bugzilla.suse.com/1180833	external
https://bugzilla.suse.com/1183103	external
https://www.suse.com/security/cve/CVE-2020-35655	external
https://bugzilla.suse.com/1180832	external
https://www.suse.com/security/cve/CVE-2021-23437	external
https://bugzilla.suse.com/1190229	external
https://www.suse.com/security/cve/CVE-2021-25289	external
https://bugzilla.suse.com/1183103	external
https://www.suse.com/security/cve/CVE-2021-25290	external
https://bugzilla.suse.com/1183105	external
https://www.suse.com/security/cve/CVE-2021-25291	external
https://bugzilla.suse.com/1183106	external
https://www.suse.com/security/cve/CVE-2021-25292	external
https://bugzilla.suse.com/1183101	external
https://www.suse.com/security/cve/CVE-2021-25293	external
https://bugzilla.suse.com/1183102	external
https://www.suse.com/security/cve/CVE-2021-27921	external
https://bugzilla.suse.com/1183110	external
https://www.suse.com/security/cve/CVE-2021-34552	external
https://bugzilla.suse.com/1188574	external
https://www.suse.com/security/cve/CVE-2023-44271	external
https://bugzilla.suse.com/1216894	external
https://www.suse.com/security/cve/CVE-2023-50447	external
https://bugzilla.suse.com/1219048	external
https://www.suse.com/security/cve/CVE-2024-28219	external
https://bugzilla.suse.com/1222262	external
https://www.suse.com/security/cve/CVE-2026-42311	external
https://bugzilla.suse.com/1270404	external
https://www.suse.com/security/cve/CVE-2026-4775	external
https://bugzilla.suse.com/1260411	external
https://www.suse.com/security/cve/CVE-2026-54059	external
https://bugzilla.suse.com/1270409	external
https://www.suse.com/security/cve/CVE-2026-55379	external
https://bugzilla.suse.com/1270411	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "python313-Pillow-12.3.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11261",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11261-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3589 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3589/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3598 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3598/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-0740 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-0740/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-0775 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-0775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3076 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3076/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-15999 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-15999/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-35653 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-35653/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-35654 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-35654/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-35655 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-35655/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-23437 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-23437/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-25289 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-25289/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-25290 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-25290/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-25291 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-25291/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-25292 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-25292/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-25293 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-25293/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-27921 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-27921/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-34552 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-34552/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-44271 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-44271/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-50447 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-50447/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-28219 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-28219/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42311 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42311/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4775 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-54059 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-54059/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55379 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55379/"
      }
    ],
    "title": "python313-Pillow-12.3.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-07-12T00:00:00Z",
      "generator": {
        "date": "2026-07-12T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11261-1",
      "initial_release_date": "2026-07-12T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-07-12T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-Pillow-12.3.0-1.1.aarch64",
                "product": {
                  "name": "python313-Pillow-12.3.0-1.1.aarch64",
                  "product_id": "python313-Pillow-12.3.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python313-Pillow-tk-12.3.0-1.1.aarch64",
                "product": {
                  "name": "python313-Pillow-tk-12.3.0-1.1.aarch64",
                  "product_id": "python313-Pillow-tk-12.3.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-12.3.0-1.1.aarch64",
                "product": {
                  "name": "python314-Pillow-12.3.0-1.1.aarch64",
                  "product_id": "python314-Pillow-12.3.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-tk-12.3.0-1.1.aarch64",
                "product": {
                  "name": "python314-Pillow-tk-12.3.0-1.1.aarch64",
                  "product_id": "python314-Pillow-tk-12.3.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-Pillow-12.3.0-1.1.ppc64le",
                "product": {
                  "name": "python313-Pillow-12.3.0-1.1.ppc64le",
                  "product_id": "python313-Pillow-12.3.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python313-Pillow-tk-12.3.0-1.1.ppc64le",
                "product": {
                  "name": "python313-Pillow-tk-12.3.0-1.1.ppc64le",
                  "product_id": "python313-Pillow-tk-12.3.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-12.3.0-1.1.ppc64le",
                "product": {
                  "name": "python314-Pillow-12.3.0-1.1.ppc64le",
                  "product_id": "python314-Pillow-12.3.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-tk-12.3.0-1.1.ppc64le",
                "product": {
                  "name": "python314-Pillow-tk-12.3.0-1.1.ppc64le",
                  "product_id": "python314-Pillow-tk-12.3.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-Pillow-12.3.0-1.1.s390x",
                "product": {
                  "name": "python313-Pillow-12.3.0-1.1.s390x",
                  "product_id": "python313-Pillow-12.3.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python313-Pillow-tk-12.3.0-1.1.s390x",
                "product": {
                  "name": "python313-Pillow-tk-12.3.0-1.1.s390x",
                  "product_id": "python313-Pillow-tk-12.3.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-12.3.0-1.1.s390x",
                "product": {
                  "name": "python314-Pillow-12.3.0-1.1.s390x",
                  "product_id": "python314-Pillow-12.3.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-tk-12.3.0-1.1.s390x",
                "product": {
                  "name": "python314-Pillow-tk-12.3.0-1.1.s390x",
                  "product_id": "python314-Pillow-tk-12.3.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-Pillow-12.3.0-1.1.x86_64",
                "product": {
                  "name": "python313-Pillow-12.3.0-1.1.x86_64",
                  "product_id": "python313-Pillow-12.3.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python313-Pillow-tk-12.3.0-1.1.x86_64",
                "product": {
                  "name": "python313-Pillow-tk-12.3.0-1.1.x86_64",
                  "product_id": "python313-Pillow-tk-12.3.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-12.3.0-1.1.x86_64",
                "product": {
                  "name": "python314-Pillow-12.3.0-1.1.x86_64",
                  "product_id": "python314-Pillow-12.3.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python314-Pillow-tk-12.3.0-1.1.x86_64",
                "product": {
                  "name": "python314-Pillow-tk-12.3.0-1.1.x86_64",
                  "product_id": "python314-Pillow-tk-12.3.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64"
        },
        "product_reference": "python313-Pillow-12.3.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le"
        },
        "product_reference": "python313-Pillow-12.3.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x"
        },
        "product_reference": "python313-Pillow-12.3.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64"
        },
        "product_reference": "python313-Pillow-12.3.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-tk-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64"
        },
        "product_reference": "python313-Pillow-tk-12.3.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-tk-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le"
        },
        "product_reference": "python313-Pillow-tk-12.3.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-tk-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x"
        },
        "product_reference": "python313-Pillow-tk-12.3.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-Pillow-tk-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64"
        },
        "product_reference": "python313-Pillow-tk-12.3.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64"
        },
        "product_reference": "python314-Pillow-12.3.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le"
        },
        "product_reference": "python314-Pillow-12.3.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x"
        },
        "product_reference": "python314-Pillow-12.3.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64"
        },
        "product_reference": "python314-Pillow-12.3.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-tk-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64"
        },
        "product_reference": "python314-Pillow-tk-12.3.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-tk-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le"
        },
        "product_reference": "python314-Pillow-tk-12.3.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-tk-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x"
        },
        "product_reference": "python314-Pillow-tk-12.3.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-Pillow-tk-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        },
        "product_reference": "python314-Pillow-tk-12.3.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-3589",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3589"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3589",
          "url": "https://www.suse.com/security/cve/CVE-2014-3589"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921566 for CVE-2014-3589",
          "url": "https://bugzilla.suse.com/921566"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3589"
    },
    {
      "cve": "CVE-2014-3598",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3598"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3598",
          "url": "https://www.suse.com/security/cve/CVE-2014-3598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921566 for CVE-2014-3598",
          "url": "https://bugzilla.suse.com/921566"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3598"
    },
    {
      "cve": "CVE-2016-0740",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-0740"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-0740",
          "url": "https://www.suse.com/security/cve/CVE-2016-0740"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 965579 for CVE-2016-0740",
          "url": "https://bugzilla.suse.com/965579"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 965582 for CVE-2016-0740",
          "url": "https://bugzilla.suse.com/965582"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-0740"
    },
    {
      "cve": "CVE-2016-0775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-0775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-0775",
          "url": "https://www.suse.com/security/cve/CVE-2016-0775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 965579 for CVE-2016-0775",
          "url": "https://bugzilla.suse.com/965579"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 965582 for CVE-2016-0775",
          "url": "https://bugzilla.suse.com/965582"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-0775"
    },
    {
      "cve": "CVE-2016-3076",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3076"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3076",
          "url": "https://www.suse.com/security/cve/CVE-2016-3076"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 973786 for CVE-2016-3076",
          "url": "https://bugzilla.suse.com/973786"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3076"
    },
    {
      "cve": "CVE-2020-15999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-15999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-15999",
          "url": "https://www.suse.com/security/cve/CVE-2020-15999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177914 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1177914"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177936 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1177936"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178824 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1178824"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178894 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1178894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-15999"
    },
    {
      "cve": "CVE-2020-35653",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-35653"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-35653",
          "url": "https://www.suse.com/security/cve/CVE-2020-35653"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180834 for CVE-2020-35653",
          "url": "https://bugzilla.suse.com/1180834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-35653"
    },
    {
      "cve": "CVE-2020-35654",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-35654"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-35654",
          "url": "https://www.suse.com/security/cve/CVE-2020-35654"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180833 for CVE-2020-35654",
          "url": "https://bugzilla.suse.com/1180833"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183103 for CVE-2020-35654",
          "url": "https://bugzilla.suse.com/1183103"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-35654"
    },
    {
      "cve": "CVE-2020-35655",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-35655"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-35655",
          "url": "https://www.suse.com/security/cve/CVE-2020-35655"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180832 for CVE-2020-35655",
          "url": "https://bugzilla.suse.com/1180832"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-35655"
    },
    {
      "cve": "CVE-2021-23437",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-23437"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-23437",
          "url": "https://www.suse.com/security/cve/CVE-2021-23437"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190229 for CVE-2021-23437",
          "url": "https://bugzilla.suse.com/1190229"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-23437"
    },
    {
      "cve": "CVE-2021-25289",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-25289"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-25289",
          "url": "https://www.suse.com/security/cve/CVE-2021-25289"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183103 for CVE-2021-25289",
          "url": "https://bugzilla.suse.com/1183103"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2021-25289"
    },
    {
      "cve": "CVE-2021-25290",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-25290"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-25290",
          "url": "https://www.suse.com/security/cve/CVE-2021-25290"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183105 for CVE-2021-25290",
          "url": "https://bugzilla.suse.com/1183105"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-25290"
    },
    {
      "cve": "CVE-2021-25291",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-25291"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-25291",
          "url": "https://www.suse.com/security/cve/CVE-2021-25291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183106 for CVE-2021-25291",
          "url": "https://bugzilla.suse.com/1183106"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-25291"
    },
    {
      "cve": "CVE-2021-25292",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-25292"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-25292",
          "url": "https://www.suse.com/security/cve/CVE-2021-25292"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183101 for CVE-2021-25292",
          "url": "https://bugzilla.suse.com/1183101"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-25292"
    },
    {
      "cve": "CVE-2021-25293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-25293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-25293",
          "url": "https://www.suse.com/security/cve/CVE-2021-25293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183102 for CVE-2021-25293",
          "url": "https://bugzilla.suse.com/1183102"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-25293"
    },
    {
      "cve": "CVE-2021-27921",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-27921"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-27921",
          "url": "https://www.suse.com/security/cve/CVE-2021-27921"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183110 for CVE-2021-27921",
          "url": "https://bugzilla.suse.com/1183110"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-27921"
    },
    {
      "cve": "CVE-2021-34552",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-34552"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-34552",
          "url": "https://www.suse.com/security/cve/CVE-2021-34552"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188574 for CVE-2021-34552",
          "url": "https://bugzilla.suse.com/1188574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-34552"
    },
    {
      "cve": "CVE-2023-44271",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-44271"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-44271",
          "url": "https://www.suse.com/security/cve/CVE-2023-44271"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216894 for CVE-2023-44271",
          "url": "https://bugzilla.suse.com/1216894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-44271"
    },
    {
      "cve": "CVE-2023-50447",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-50447"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-50447",
          "url": "https://www.suse.com/security/cve/CVE-2023-50447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219048 for CVE-2023-50447",
          "url": "https://bugzilla.suse.com/1219048"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-50447"
    },
    {
      "cve": "CVE-2024-28219",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-28219"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-28219",
          "url": "https://www.suse.com/security/cve/CVE-2024-28219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1222262 for CVE-2024-28219",
          "url": "https://bugzilla.suse.com/1222262"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-28219"
    },
    {
      "cve": "CVE-2026-42311",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42311"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42311",
          "url": "https://www.suse.com/security/cve/CVE-2026-42311"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270404 for CVE-2026-42311",
          "url": "https://bugzilla.suse.com/1270404"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-42311"
    },
    {
      "cve": "CVE-2026-4775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4775",
          "url": "https://www.suse.com/security/cve/CVE-2026-4775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260411 for CVE-2026-4775",
          "url": "https://bugzilla.suse.com/1260411"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4775"
    },
    {
      "cve": "CVE-2026-54059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-54059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-54059",
          "url": "https://www.suse.com/security/cve/CVE-2026-54059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270409 for CVE-2026-54059",
          "url": "https://bugzilla.suse.com/1270409"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-54059"
    },
    {
      "cve": "CVE-2026-55379",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55379"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow\u0027s documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
          "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55379",
          "url": "https://www.suse.com/security/cve/CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270411 for CVE-2026-55379",
          "url": "https://bugzilla.suse.com/1270411"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
            "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-12T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-55379"
    }
  ]
}

PYSEC-2026-2252

Vulnerability from pysec - Published: 2026-05-09 06:16 - Updated: 2026-07-13 05:50

Details

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impacted products

Name	purl
pillow	pkg:pypi/pillow

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {},
      "package": {
        "ecosystem": "PyPI",
        "name": "pillow",
        "purl": "pkg:pypi/pillow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "10.3.0"
            },
            {
              "fixed": "12.2.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.3.0",
        "10.4.0",
        "11.0.0",
        "11.1.0",
        "11.2.1",
        "11.3.0",
        "12.0.0",
        "12.1.0",
        "12.1.1"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-42311",
    "GHSA-pwv6-vv43-88gr"
  ],
  "details": "Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.",
  "id": "PYSEC-2026-2252",
  "modified": "2026-07-13T05:50:45.437102Z",
  "published": "2026-05-09T06:16:10.430Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python-pillow/Pillow/pull/9520"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2026-42311 (GCVE-0-2026-42311)

Tags

Sightings

Nomenclature

Action not permitted

CVE-2026-42311 (GCVE-0-2026-42311)

Vulnerability from bitnami_vulndb

Solutions

Vulnerability from cleanstart

Vulnerability from cleanstart

Vulnerability from cleanstart

Impact

Patches

Workarounds

Resources

Tags

Sightings

Nomenclature