StackPrism

PyPI package

pillow 11.0.0 vulnerabilities, and the version that fixes all of them

pillow 11.0.0 has 17 known vulnerabilities (13 rated high or critical); 12.3.0 fixes all of them.

PyPI (opens in a new tab) describes it as “Python Imaging Library (fork)”

Known vulnerabilities
17
13 rated high or critical
Released
Oct 15, 2024
Latest is 13.0.0
Licence
MIT-CMU
OpenSSF Scorecard
7.6/10
python-pillow/pillow (opens in a new tab)
Dependencies
None
Resolved by deps.dev

What to upgrade to

12.3.0 is the closest release with no known vulnerabilities.

  • 11.3.0

    Newest 11.x release. Released Jul 1, 2025.

    18 known vulnerabilities, worst rated warning

  • 12.3.0Upgrade to this

    Fixes all 17 known vulnerabilities. Released Jul 1, 2026.

    No known vulnerabilities

  • 13.0.0

    Latest release. Released Oct 16, 2026.

    No known vulnerabilities

12.3.0 came out on Jul 1, 2026. A coding agent trained before then doesn’t know it exists, so it may suggest an older release. AI knowledge cutoff dates

Hand the fix to your coding agent

One task with the upgrade, the file to change and why. Paste it into Claude Code, Cursor or Codex.

Findings

Every advisory for pillow 11.0.0

Known exploited first (CISA KEV), then by how likely they are to be exploited (FIRST EPSS), then by severity. Each id links to its OSV.dev record.

  1. CriticalCVE-2026-40192 on OSV.dev (opens in a new tab)GHSA-whj4-6x5x-4v2jEPSS: top 43%

    FITS GZIP decompression bomb in Pillow

    Fixed in 12.2.0. Published Apr 13, 2026.

  2. CriticalCVE-2026-54058 on OSV.dev (opens in a new tab)GHSA-62p4-gmf7-7g93EPSS: top 58%

    Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

    Fixed in 12.3.0. Published Jul 20, 2026.

  3. CriticalCVE-2026-25990 on OSV.dev (opens in a new tab)GHSA-cfh3-3jmp-rvhcEPSS: top 60%

    Pillow affected by out-of-bounds write when loading PSD images

    Fixed in 12.1.1. Published Feb 11, 2026.

  4. CriticalCVE-2026-59197 on OSV.dev (opens in a new tab)GHSA-xj96-63gp-2gmrEPSS: top 63%

    Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

    Fixed in 12.3.0. Published Jul 20, 2026.

  5. CriticalCVE-2026-55379 on OSV.dev (opens in a new tab)GHSA-45hq-cxwh-f6vcEPSS: top 66%

    Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

    Fixed in 12.3.0. Published Jul 20, 2026.

  6. CriticalCVE-2026-55380 on OSV.dev (opens in a new tab)GHSA-phj9-mv4w-65pmEPSS: top 66%

    Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

    Fixed in 12.3.0. Published Jul 20, 2026.

  7. CriticalCVE-2026-54060 on OSV.dev (opens in a new tab)GHSA-5x94-69rx-g8h2EPSS: top 66%

    Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

    Fixed in 12.3.0. Published Jul 20, 2026.

  8. CriticalCVE-2026-54059 on OSV.dev (opens in a new tab)GHSA-8v84-f9pq-wr9xEPSS: top 67%

    Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

    Fixed in 12.3.0. Published Jul 20, 2026.

  9. CriticalCVE-2026-59205 on OSV.dev (opens in a new tab)GHSA-9hw9-ch79-4vh6EPSS: top 69%

    Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

    Fixed in 12.3.0. Published Jul 20, 2026.

  10. CriticalCVE-2026-59204 on OSV.dev (opens in a new tab)GHSA-vjc4-5qp5-m44jEPSS: top 69%

    Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

    Fixed in 12.3.0. Published Jul 20, 2026.

  11. CriticalCVE-2026-59200 on OSV.dev (opens in a new tab)GHSA-jjj6-mw9f-p565EPSS: top 69%

    Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

    Fixed in 12.3.0. Published Jul 20, 2026.

  12. CriticalCVE-2026-59199 on OSV.dev (opens in a new tab)GHSA-6r8x-57c9-28j4EPSS: top 69%

    Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

    Fixed in 12.3.0. Published Jul 20, 2026.

  13. WarningCVE-2026-59198 on OSV.dev (opens in a new tab)GHSA-fj7v-r99m-22gqEPSS: top 78%

    Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

    Fixed in 12.3.0. Published Jul 20, 2026.

  14. CriticalCVE-2026-42311 on OSV.dev (opens in a new tab)GHSA-pwv6-vv43-88grEPSS: top 89%

    Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

    Fixed in 12.2.0. Published May 4, 2026.

  15. WarningCVE-2026-55798 on OSV.dev (opens in a new tab)GHSA-4x4j-2g7c-83w6EPSS: top 94%

    Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

    Fixed in 12.3.0. Published Jul 20, 2026.

  16. WarningCVE-2026-42310 on OSV.dev (opens in a new tab)GHSA-r73j-pqj5-w3x7EPSS: top 94%

    Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

    Fixed in 12.2.0. Published May 4, 2026.

  17. WarningCVE-2026-42308 on OSV.dev (opens in a new tab)GHSA-wjx4-4jcj-g98jEPSS: top 96%

    Pillow has an integer overflow when processing fonts

    Fixed in 12.2.0. Published May 4, 2026.

Is pillow the only one?

Paste a public GitHub repo or drop your requirements.txt or pyproject.toml and see every vulnerable, end-of-life or deprecated dependency, with one fix task. Free, no sign-up.

Check your whole repo

How this page is checked

StackPrism asks OSV.dev which advisories affect exactly pillow 11.0.0, merges duplicates filed under several ids, and ranks them with CISA’s Known Exploited Vulnerabilities list and FIRST EPSS. Release dates and deprecation come from deps.dev and PyPI. No AI writes this page: every sentence comes from that data, refreshed every few hours.

Last checked against PyPI, OSV.dev, deps.dev, CISA KEV and FIRST EPSS.