Pillow · week of 26 Oct 2026

Pillow security note

Records on this stack that changed between 26 Oct 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.

What changed

CVE-2026-96641 — Check if you run it
Pillow is a Python imaging library.
Affected < 13.0.0
CVE-2026-114501 — Check if you run it
Pillow is a Python imaging library.
Affected < 13.0.0
CVE-2026-112901 — Check if you run it
Pillow is a Python imaging library.
Affected <= 12.3.0
CVE-2026-112397 — Check if you run it
Pillow is a Python imaging library.
Affected <= 12.3.0
CVE-2026-96637 — Check if you run it
Pillow is a Python imaging library.
Affected < 13.0.0
CVE-2026-112403 — Check if you run it
Pillow is a Python imaging library.
Affected <= 12.3.0
CVE-2026-112398 — Check if you run it
Pillow is a Python imaging library.
Affected <= 12.3.0
CVE-2026-96636 — Check if you run it
Pillow is a Python imaging library.
Affected < 13.0.0

What we still do not know

Every changed record in this note has a version range.

Share this note

Pillow security note, week of 26 Oct 2026: 8 records have a version a customer can check, and 0 still do not. https://zerodayfindings.com/technologies/pillow/notes/2026-W44