Pillow security vulnerabilities
Developer framework / library. Public CVE monitoring for Pillow. Vendor security advisories are linked on this page.
Built for Operators of this product.
50 public records · 0 security-fix timeline events. 0 published in the last 7 days. 44 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 5
- High 24
- Medium 12
- Low 0
2026-08-0441 issues2026-11-01
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- High8.1Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()Open the advisoryOct 22, 2026
- High7.1Pillow is a Python imaging library.Check if you run itEPSS 0.38%Oct 21, 2026
- High7.1Pillow is a Python imaging library.Check if you run itEPSS 0.34%Oct 21, 2026
- Medium6.5Pillow is a Python imaging library.Check if you run itEPSS 0.34%Oct 21, 2026
- Critical9.8Pillow is a Python imaging library.Check if you run itEPSS 0.66%Oct 21, 2026
- Medium6.5Pillow is a Python imaging library.Check if you run itEPSS 0.34%Oct 21, 2026
- Medium6.3Pillow is a Python imaging library.Check if you run itEPSS 0.37%Oct 21, 2026
- Medium6.5Pillow is a Python imaging library.Check if you run itEPSS 0.34%Oct 21, 2026
- High8.2Pillow is a Python imaging library.Check if you run itEPSS 0.60%Oct 21, 2026
- High7.1Pillow is a Python imaging library.Check if you run itEPSS 0.37%Oct 21, 2026