Pillow

Everything Patch Observer has reported about Pillow: 2 stories, newest first. Part of our Vulnerabilities coverage.

Organisations Urged to Patch Pillow 13.0.0 to Block Critical Arbitrary Code Execution Flaw CVE-2026-112398

A critical flaw in Pillow versions before 13.0.0 allows arbitrary code execution via crafted files, requiring immediate updates for exposed systems.

Oct 20, 2026

Vulnerabilities

Pillow Python Library Patch Fixes High-Severity Memory Access Flaw

A zero-width image processing error in Pillow versions before 13.0.0 allows attackers to crash applications. The vendor has released a fix for this high-severity vulnerability.

Oct 19, 2026