Build software better, together
{{ message }}
python-pillow / Pillow Public
To report sensitive vulnerability information, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.
If your organisation/employer is a distributor of Pillow and would like advance notification of security-related bugs, please let us know your preferred contact method.
Out-of-bounds write when loading PSD images
GHSA-cfh3-3jmp-rvhc published Feb 11, 2026 by radarhere
High
Write buffer overflow on BCn encoding
GHSA-xg8h-j46f-w952 published Jul 1, 2025 by radarhere
High
Learn more about advisories related to python-pillow/Pillow in the GitHub Advisory Database