pillow 12.0.0 vulnerabilities, and the version that fixes all of them

What to upgrade to

12.3.0 is the closest release with no known vulnerabilities.

• 12.3.0Upgrade to this

  Fixes all 19 known vulnerabilities and the newest 12.x release. Released Jul 1, 2026.

  No known vulnerabilities

• 13.0.0

  Latest release. Released Oct 16, 2026.

  No known vulnerabilities

12.3.0 came out on Jul 1, 2026. A coding agent trained before then doesn’t know it exists, so it may suggest an older release. AI knowledge cutoff dates

Findings

• 

  CriticalVulnerability

  19 known vulnerabilities in pillow 12.0.0

  EPSS: top 43%

  13 rated high or critical. Most serious: CVE-2026-40192, FITS GZIP decompression bomb in Pillow. Upgrading to 12.3.0 fixes all of them.

  12.0.012.3.0View advisory, source: OSV.dev (opens in a new tab)Upgrade notes (opens in a new tab)
• 

  LowOutdated

  pillow 12.0.0 is 1 major version behind

  Latest release is 13.0.0.

  12.0.013.0.0Release notes, source: PyPI (opens in a new tab)Upgrade notes (opens in a new tab)

Every advisory for pillow 12.0.0

Known exploited first (CISA KEV), then by how likely they are to be exploited (FIRST EPSS), then by severity. Each id links to its OSV.dev record.

1. CriticalCVE-2026-40192 on OSV.dev (opens in a new tab)GHSA-whj4-6x5x-4v2jEPSS: top 43%

   FITS GZIP decompression bomb in Pillow

   Fixed in 12.2.0. Published Apr 13, 2026.

2. CriticalCVE-2026-54058 on OSV.dev (opens in a new tab)GHSA-62p4-gmf7-7g93EPSS: top 58%

   Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

   Fixed in 12.3.0. Published Jul 20, 2026.

3. CriticalCVE-2026-25990 on OSV.dev (opens in a new tab)GHSA-cfh3-3jmp-rvhcEPSS: top 60%

   Pillow affected by out-of-bounds write when loading PSD images

   Fixed in 12.1.1. Published Feb 11, 2026.

4. CriticalCVE-2026-59197 on OSV.dev (opens in a new tab)GHSA-xj96-63gp-2gmrEPSS: top 63%

   Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

   Fixed in 12.3.0. Published Jul 20, 2026.

5. CriticalCVE-2026-55379 on OSV.dev (opens in a new tab)GHSA-45hq-cxwh-f6vcEPSS: top 66%

   Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

   Fixed in 12.3.0. Published Jul 20, 2026.

6. CriticalCVE-2026-55380 on OSV.dev (opens in a new tab)GHSA-phj9-mv4w-65pmEPSS: top 66%

   Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

   Fixed in 12.3.0. Published Jul 20, 2026.

7. CriticalCVE-2026-54060 on OSV.dev (opens in a new tab)GHSA-5x94-69rx-g8h2EPSS: top 66%

   Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

   Fixed in 12.3.0. Published Jul 20, 2026.

8. CriticalCVE-2026-54059 on OSV.dev (opens in a new tab)GHSA-8v84-f9pq-wr9xEPSS: top 67%

   Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

   Fixed in 12.3.0. Published Jul 20, 2026.

9. WarningCVE-2026-59203 on OSV.dev (opens in a new tab)GHSA-pg7v-jwj7-p798EPSS: top 68%

   Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

   Fixed in 12.3.0. Published Jul 20, 2026.

10. CriticalCVE-2026-59205 on OSV.dev (opens in a new tab)GHSA-9hw9-ch79-4vh6EPSS: top 69%

    Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

    Fixed in 12.3.0. Published Jul 20, 2026.

11. CriticalCVE-2026-59204 on OSV.dev (opens in a new tab)GHSA-vjc4-5qp5-m44jEPSS: top 69%

    Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

    Fixed in 12.3.0. Published Jul 20, 2026.

12. CriticalCVE-2026-59200 on OSV.dev (opens in a new tab)GHSA-jjj6-mw9f-p565EPSS: top 69%

    Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

    Fixed in 12.3.0. Published Jul 20, 2026.

13. CriticalCVE-2026-59199 on OSV.dev (opens in a new tab)GHSA-6r8x-57c9-28j4EPSS: top 69%

    Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

    Fixed in 12.3.0. Published Jul 20, 2026.

14. WarningCVE-2026-59198 on OSV.dev (opens in a new tab)GHSA-fj7v-r99m-22gqEPSS: top 78%

    Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

    Fixed in 12.3.0. Published Jul 20, 2026.

15. CriticalCVE-2026-42311 on OSV.dev (opens in a new tab)GHSA-pwv6-vv43-88grEPSS: top 89%

    Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

    Fixed in 12.2.0. Published May 4, 2026.

16. WarningCVE-2026-42309 on OSV.dev (opens in a new tab)GHSA-5xmw-vc9v-4wf2EPSS: top 93%

    Pillow has a heap buffer overflow with nested list coordinates

    Fixed in 12.2.0. Published May 4, 2026.

17. WarningCVE-2026-55798 on OSV.dev (opens in a new tab)GHSA-4x4j-2g7c-83w6EPSS: top 94%

    Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

    Fixed in 12.3.0. Published Jul 20, 2026.

18. WarningCVE-2026-42310 on OSV.dev (opens in a new tab)GHSA-r73j-pqj5-w3x7EPSS: top 94%

    Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

    Fixed in 12.2.0. Published May 4, 2026.

19. WarningCVE-2026-42308 on OSV.dev (opens in a new tab)GHSA-wjx4-4jcj-g98jEPSS: top 96%

    Pillow has an integer overflow when processing fonts

    Fixed in 12.2.0. Published May 4, 2026.

How this page is checked

StackPrism asks OSV.dev which advisories affect exactly pillow 12.0.0, merges duplicates filed under several ids, and ranks them with CISA’s Known Exploited Vulnerabilities list and FIRST EPSS. Release dates and deprecation come from deps.dev and PyPI. No AI writes this page: every sentence comes from that data, refreshed every few hours.

Last checked Oct 17, 2026, 11:02 UTC against PyPI, OSV.dev, deps.dev, CISA KEV and FIRST EPSS.