Catálogo de CVE

CVE-2026-96644

pillow affected and fixed versions

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using the original full dimensions. A crafted wide, short metafile can pass the pixel-count decompression-bomb check and make the Windows-only renderer read beyond the heap buffer, potentially disclosing memory or crashing the process. This issue is fixed in version 13.0.0.

Gravedad: High · CVSS 7.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Published: Oct 21, 2026, 8:54:43 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.41% · Oct 27, 2026

Projects and upstream resources

[pillow][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	pillow	`11.1.0-5+deb13u3`	Not affected	[CVE-2026-96644]
Debiantrixie	pillow	Not reported	Not affectedDistribution reports not affected	[CVE-2026-96644]
Debiantrixie	pillow	`11.1.0-5+deb13u4`	Not affected	[CVE-2026-96644]
Debiansid	pillow	Not reported	Not affectedDistribution reports not affected	[CVE-2026-96644]
Debiansid	pillow	`13.0.0-1`	Not affected	[CVE-2026-96644]
Ubuntupro	pillow	`6.1.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`6.1.0-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`6.2.1-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC

Showing 12 observations. All 55 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Debianbookworm	pillow	Not reported	Not affectedDistribution reports not affected	[CVE-2026-96644]
Debianbookworm	pillow	`9.4.0-1.1+deb12u1`	Not affected	[CVE-2026-96644]
Debianbookworm-security	pillow	`9.4.0-1.1+deb12u1`	Not affected	[CVE-2026-96644]
Debianforky	pillow	Not reported	Not affectedDistribution reports not affected	[CVE-2026-96644]
Debianforky	pillow	`12.3.0-1`	Not affected	[CVE-2026-96644]
Debiansid	pillow	Not reported	Not affectedDistribution reports not affected	[CVE-2026-96644]
Debiansid	pillow	`13.0.0-1`	Not affected	[CVE-2026-96644]
Debiantrixie	pillow	Not reported	Not affectedDistribution reports not affected	[CVE-2026-96644]
Debiantrixie	pillow	`11.1.0-5+deb13u4`	Not affected	[CVE-2026-96644]
Debiantrixie-security	pillow	`11.1.0-5+deb13u3`	Not affected	[CVE-2026-96644]
Ubuntu22.04	pillow	`8.1.2+dfsg-0.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.1-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.1-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.1-1ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.1-1ubuntu0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.1-1ubuntu0.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.1-1ubuntu0.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu22.04	pillow	`9.0.1-1ubuntu0.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu24.04	pillow	`10.0.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu24.04	pillow	`10.1.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu24.04	pillow	`10.2.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu24.04	pillow	`10.2.0-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu24.04	pillow	`10.2.0-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu24.04	pillow	`10.2.0-1ubuntu1.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu24.04	pillow	`10.2.0-1ubuntu1.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`11.3.0-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`11.3.0-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`12.0.0-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`12.1.1-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`12.1.1-2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`12.1.1-2ubuntu1.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`12.1.1-2ubuntu1.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.04	pillow	`12.1.1-2ubuntu1.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.10	pillow	`12.1.1-2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntu26.10	pillow	`12.3.0-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`6.1.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`6.1.0-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`6.2.1-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.6`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.7`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.8`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.9`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow	`7.0.0-4ubuntu0.9+esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3ubuntu0.1~esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3ubuntu0.1~esm2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3~build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-96644]Oct 28, 2026, 8:17:27 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "pillow",
      "status": "not affected",
      "release": "sid",
      "version": "13.0.0-1"
    },
    {
      "name": "pillow",
      "status": "not affected",
      "release": "forky",
      "version": "12.3.0-1"
    },
    {
      "name": "pillow",
      "status": "not affected",
      "release": "trixie",
      "version": "11.1.0-5+deb13u4"
    },
    {
      "name": "pillow",
      "status": "not affected",
      "release": "trixie-security",
      "version": "11.1.0-5+deb13u3"
    },
    {
      "name": "pillow",
      "status": "not affected",
      "release": "bookworm",
      "version": "9.4.0-1.1+deb12u1"
    },
    {
      "name": "pillow",
      "status": "not affected",
      "release": "bookworm-security",
      "version": "9.4.0-1.1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": [
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "6.1.0-1",
        "6.1.0-1build1",
        "6.2.1-2",
        "7.0.0-4",
        "7.0.0-4build1",
        "7.0.0-4ubuntu0.1",
        "7.0.0-4ubuntu0.2",
        "7.0.0-4ubuntu0.3",
        "7.0.0-4ubuntu0.4",
        "7.0.0-4ubuntu0.5",
        "7.0.0-4ubuntu0.6",
        "7.0.0-4ubuntu0.7",
        "7.0.0-4ubuntu0.8",
        "7.0.0-4ubuntu0.9",
        "7.0.0-4ubuntu0.9+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-96644",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-96644",
      "provider_updated_at": "2026-10-28T20:17:27.621362091Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow-python2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "6.2.1-3~build1",
        "6.2.1-3",
        "6.2.1-3ubuntu0.1~esm1",
        "6.2.1-3ubuntu0.1~esm2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-96644",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-96644",
      "provider_updated_at": "2026-10-28T20:17:27.621362091Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "8.1.2+dfsg-0.3",
        "9.0.0-1",
        "9.0.1-1",
        "9.0.1-1build1",
        "9.0.1-1ubuntu0.1",
        "9.0.1-1ubuntu0.2",
        "9.0.1-1ubuntu0.3",
        "9.0.1-1ubuntu0.4",
        "9.0.1-1ubuntu0.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-96644",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-96644",
      "provider_updated_at": "2026-10-28T20:17:27.621362091Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "10.0.0-1",
        "10.1.0-1",
        "10.2.0-1",
        "10.2.0-1build1",
        "10.2.0-1ubuntu1",
        "10.2.0-1ubuntu1.2",
        "10.2.0-1ubuntu1.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-96644",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-96644",
      "provider_updated_at": "2026-10-28T20:17:27.621362091Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.10",
      "versions": [
        "12.1.1-2ubuntu1",
        "12.3.0-1ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-96644",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-96644",
      "provider_updated_at": "2026-10-28T20:17:27.621362091Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "11.3.0-1ubuntu1",
        "11.3.0-1ubuntu2",
        "12.0.0-1ubuntu1",
        "12.1.1-1ubuntu1",
        "12.1.1-2ubuntu1",
        "12.1.1-2ubuntu1.1",
        "12.1.1-2ubuntu1.2",
        "12.1.1-2ubuntu1.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-96644",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-96644",
      "provider_updated_at": "2026-10-28T20:17:27.621362091Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "ranges": [
        {
          "fixed": "13.0.0",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96644",
      "fixed_version": "13.0.0",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-96644",
      "provider_updated_at": "2026-10-28T19:19:28.633"
    }
  ]
}

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[python3-pil]Desconocido
Paquete fuente: [pillow]
Detalles (4)
- 9.4.0-1.1+deb12u1 · amd64 · bookworm
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · arm64 · bookworm
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · amd64 · bookworm-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · arm64 · bookworm-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
[python3-pil.imagetk]Desconocido
Paquete fuente: [pillow]
Detalles (4)
- 9.4.0-1.1+deb12u1 · amd64 · bookworm
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · arm64 · bookworm
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · amd64 · bookworm-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · arm64 · bookworm-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
[python-pil-doc]Desconocido
Paquete fuente: [pillow]
Detalles (4)
- 9.4.0-1.1+deb12u1 · all · bookworm
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · all · bookworm
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · all · bookworm-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 9.4.0-1.1+deb12u1 · all · bookworm-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm

[Debian 13 (Trixie)]

[python3-pil]Desconocido
Paquete fuente: [pillow]
Detalles (4)
- 11.1.0-5+deb13u4 · amd64 · trixie
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u4 · arm64 · trixie
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u3 · amd64 · trixie-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u3 · arm64 · trixie-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
[python3-pil.imagetk]Desconocido
Paquete fuente: [pillow]
Detalles (4)
- 11.1.0-5+deb13u4 · amd64 · trixie
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u4 · arm64 · trixie
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u3 · amd64 · trixie-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u3 · arm64 · trixie-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
[python-pil-doc]Desconocido
Paquete fuente: [pillow]
Detalles (4)
- 11.1.0-5+deb13u4 · all · trixie
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u4 · all · trixie
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u3 · all · trixie-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm
- 11.1.0-5+deb13u3 · all · trixie-security
  Desconocido
  Version impact unknown
  dsa · pillow · debian · bookworm

Observado: Oct 29, 2026, 8:14:34 AM UTC

Referencias

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]