Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-112894Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)PyPI · pillow · fixed in 13.0.0
- CVE-2026-112893Pillow: Invalid free in FreeType glyph rendering when a stroker is activePyPI · pillow · fixed in 13.0.0
- CVE-2026-112892Pillow: MSP RLE decoder expands a tiny file into unbounded memoryPyPI · pillow · fixed in 13.0.0
- CVE-2026-112891Pillow: Quadratic GIF comment copying during savePyPI · pillow · fixed in 13.0.0
- CVE-2026-112406Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cyclePyPI · pillow · fixed in 13.0.0
- CVE-2026-112405Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0PyPI · pillow · fixed in 13.0.0
- CVE-2026-112404Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsPyPI · pillow · fixed in 13.0.0
- CVE-2026-112403Pillow: Heap buffer overflow in ImagingJpegDecodePyPI · pillow · fixed in 13.0.0
- CVE-2026-112402Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transformPyPI · pillow · fixed in 13.0.0
- CVE-2026-112397Pillow: Out-of-bounds access in _imagingmorph on a zero-width imagePyPI · pillow · fixed in 13.0.0
- CVE-2026-112392Pillow: NULL dereference in ImagingExpand via rank filters on zero-size imagesPyPI · pillow · fixed in 13.0.0
- CVE-2026-112401Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()PyPI · pillow · fixed in 13.0.0
- CVE-2026-112400Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoSPyPI · pillow · fixed in 13.0.0
- CVE-2026-112399Pillow: APNG background disposal allocates full canvas before decompression bomb checkPyPI · pillow · fixed in 13.0.0
- CVE-2026-112398Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionPyPI · pillow · fixed in 13.0.0
- CVE-2026-53995MLflow 3.17.1 and prior Path Traversal via Trace ID APIPyPI · mlflow · fixed in 3.17.2
- CVE-2026-112396Pillow: Heap use-after-free when encoding TIFF to an in-memory bufferPyPI · pillow · fixed in 13.0.0
- CVE-2026-112395Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)PyPI · pillow · fixed in 13.0.0
- CVE-2026-112394Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer sizePyPI · pillow · fixed in 13.0.0
- CVE-2026-112393Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIOPyPI · pillow · fixed in 13.0.0
- CVE-2026-112391Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()PyPI · pillow · fixed in 13.0.0
- CVE-2026-112390Pillow: Infinite loop in MIC n_frames when the embedded TIFFPyPI · pillow · fixed in 13.0.0
- CVE-2026-111750AIOHTTP: Pure-Python parser request smugglingPyPI · aiohttp · fixed in 3.14.4
- CVE-2026-111749AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookiesPyPI · aiohttp · fixed in 3.14.4
- CVE-2026-111748AIOHTTP: Absolute-form request targets can spoof Request.schemePyPI · aiohttp · fixed in 3.14.4
- CVE-2026-111066AIOHTTP: File descriptor exhaustion in multipart requestsPyPI · aiohttp · fixed in 3.14.4
- CVE-2026-111065AIOHTTP: Connector pool exhaustion via Max-Age overflowPyPI · aiohttp · fixed in 3.14.4
- CVE-2026-111064aiohttp server lacks an initial request/header timeoutPyPI · aiohttp · fixed in 3.14.4
- CVE-2026-111063AIOHTTP: Secure attribute not enforced for shared cookiePyPI · aiohttp · fixed in 3.14.4
- CVE-2026-111059Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLPyPI · mercury · fixed in 3.2.11