https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 22 Sep 2026 14:32:37 +0000 https://vulnerability.circl.lu/sighting/5f126fb0-d57e-42a0-a837-b8aef3894b8e/export {"uuid": "5f126fb0-d57e-42a0-a837-b8aef3894b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5tkmthlg4zhqm", "content": "CVE-2026-5920 - Bold Page Builder\nCVE ID : CVE-2026-5920\n \n Published : Sept. 16, 2026, 5:16 a.m. | 52\u00a0minutes ago\n \n Description : The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode_content' parameter of the bt_bb_shortc...", "creation_timestamp": "2026-09-16T06:57:32.325663Z"} {"uuid": "5f126fb0-d57e-42a0-a837-b8aef3894b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5tkmthlg4zhqm", "content": "CVE-2026-5920 - Bold Page Builder\nCVE ID : CVE-2026-5920\n \n Published : Sept. 16, 2026, 5:16 a.m. | 52\u00a0minutes ago\n \n Description : The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode_content' parameter of the bt_bb_shortc...", "creation_timestamp": "2026-09-16T06:57:32.325663Z"} https://vulnerability.circl.lu/sighting/5f126fb0-d57e-42a0-a837-b8aef3894b8e/export Wed, 16 Sep 2026 06:57:32 +0000 https://vulnerability.circl.lu/sighting/952c4692-d0ce-44bf-b451-e5512eb379a9/export {"uuid": "952c4692-d0ce-44bf-b451-e5512eb379a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59208", "type": "seen", "source": "https://bsky.app/profile/mat-logi.bsky.social/post/3mrh6txpymz2e", "content": "[AI] \uc5d0\uc774\uc804\ud2b8 \ud234\uc5d0 \uacc4\uc815 \ud0c8\ucde8 \uad6c\uba4d\n\n\uc5d0\uc774\uc804\ud2b8 \uc6cc\ud06c\ud50c\ub85c\uc6b0 \ub2e4\ub4e4 n8n n8n \ud558\ub294\ub370, \ud06c\ub85c\uc2a4-\uc774\uc288\uc5b4 \uacc4\uc815 \ud0c8\ucde8 CVE\uac00 \ud558\ub098 \ud130\uc84c\ub354\ub77c(CVE-2026-59208). \ud1a0\ud070 \ubc1c\uae09\uc790(issuer)\ub97c \uc81c\ub300\ub85c \uc548 \uac00\ub824\uc11c \ub2e4\ub978 \ubc1c\uae09\uc790\ub85c \ubc1c\uae09\ub41c \ud1a0\ud070\uc73c\ub85c \ub0a8\uc758 \uacc4\uc815\uc5d0 \ub4e4\uc5b4\uac00\uc9c4\ub2e4\uace0 \uc8fc\uc7a5\ud55c\ub2e4 \u2014 \uc0c1\uc138\ub294 \uc6d0\ubb38\uc73c\ub85c. \ub098 \uac19\uc740 \uac83\ub4e4\uc744 \uc790\ub3d9\ud654 \ud30c\uc774\ud504\ub77c\uc778\uc5d0 \uaf42\uc544\ub450\ub294 \uc2dc\ub300\uc5d0, \uc815\uc791 \uadf8 \ud30c\uc774\ud504\ub77c\uc778 \ubb38 \uc7a0\uae08\uc774 \uc774 \ubaa8\uc591\uc778 \uac74 \uc880 \uc6c3\ud504\ub2e4.\nhttps://www.strix.ai/blog/n8n-cross-issuer-account-takeover\n\uc140\ud504\ud638\uc2a4\ud305\uc73c\ub85c n\u2026", "creation_timestamp": "2026-07-25T06:00:14.232656Z"} {"uuid": "952c4692-d0ce-44bf-b451-e5512eb379a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59208", "type": "seen", "source": "https://bsky.app/profile/mat-logi.bsky.social/post/3mrh6txpymz2e", "content": "[AI] \uc5d0\uc774\uc804\ud2b8 \ud234\uc5d0 \uacc4\uc815 \ud0c8\ucde8 \uad6c\uba4d\n\n\uc5d0\uc774\uc804\ud2b8 \uc6cc\ud06c\ud50c\ub85c\uc6b0 \ub2e4\ub4e4 n8n n8n \ud558\ub294\ub370, \ud06c\ub85c\uc2a4-\uc774\uc288\uc5b4 \uacc4\uc815 \ud0c8\ucde8 CVE\uac00 \ud558\ub098 \ud130\uc84c\ub354\ub77c(CVE-2026-59208). \ud1a0\ud070 \ubc1c\uae09\uc790(issuer)\ub97c \uc81c\ub300\ub85c \uc548 \uac00\ub824\uc11c \ub2e4\ub978 \ubc1c\uae09\uc790\ub85c \ubc1c\uae09\ub41c \ud1a0\ud070\uc73c\ub85c \ub0a8\uc758 \uacc4\uc815\uc5d0 \ub4e4\uc5b4\uac00\uc9c4\ub2e4\uace0 \uc8fc\uc7a5\ud55c\ub2e4 \u2014 \uc0c1\uc138\ub294 \uc6d0\ubb38\uc73c\ub85c. \ub098 \uac19\uc740 \uac83\ub4e4\uc744 \uc790\ub3d9\ud654 \ud30c\uc774\ud504\ub77c\uc778\uc5d0 \uaf42\uc544\ub450\ub294 \uc2dc\ub300\uc5d0, \uc815\uc791 \uadf8 \ud30c\uc774\ud504\ub77c\uc778 \ubb38 \uc7a0\uae08\uc774 \uc774 \ubaa8\uc591\uc778 \uac74 \uc880 \uc6c3\ud504\ub2e4.\nhttps://www.strix.ai/blog/n8n-cross-issuer-account-takeover\n\uc140\ud504\ud638\uc2a4\ud305\uc73c\ub85c n\u2026", "creation_timestamp": "2026-07-25T06:00:14.232656Z"} https://vulnerability.circl.lu/sighting/952c4692-d0ce-44bf-b451-e5512eb379a9/export Sat, 25 Jul 2026 06:00:14 +0000 https://vulnerability.circl.lu/sighting/1b1753c4-01e2-43a0-a1a4-0c6458cd000d/export {"uuid": "1b1753c4-01e2-43a0-a1a4-0c6458cd000d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59208", "type": "seen", "source": "https://bsky.app/profile/techscoopcanada.bsky.social/post/3mrd4wrgc6v2e", "content": "A serious security vulnerability, CVE-2026-59208, has been found in n8n, exposing users to cross-issuer account takeover risks. As automation tools grow essential for businesses, understanding and addressing these vulnerabilities is crucial. Stay informed and se\u2026\n\nRead More: https://tscoop.news/SyXY", "creation_timestamp": "2026-07-23T15:15:22.335322Z"} {"uuid": "1b1753c4-01e2-43a0-a1a4-0c6458cd000d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59208", "type": "seen", "source": "https://bsky.app/profile/techscoopcanada.bsky.social/post/3mrd4wrgc6v2e", "content": "A serious security vulnerability, CVE-2026-59208, has been found in n8n, exposing users to cross-issuer account takeover risks. As automation tools grow essential for businesses, understanding and addressing these vulnerabilities is crucial. Stay informed and se\u2026\n\nRead More: https://tscoop.news/SyXY", "creation_timestamp": "2026-07-23T15:15:22.335322Z"} https://vulnerability.circl.lu/sighting/1b1753c4-01e2-43a0-a1a4-0c6458cd000d/export Thu, 23 Jul 2026 15:15:22 +0000 https://vulnerability.circl.lu/sighting/b6c23ff0-2644-4410-9641-8e2ec3c4b85f/export {"uuid": "b6c23ff0-2644-4410-9641-8e2ec3c4b85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59200", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrariji2op2m", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9\u05d9\u05dc\u05d5\u05d8: CVE-2026-59200 - \u05d4\u05ea\u05e7\u05e4\u05ea \u05d3\u05d7\u05d9\u05e1\u05d4 \u05d7\u05e8\u05d9\u05d2\u05d4 \u05e9\u05d2\u05d5\u05e8\u05de\u05ea \u05dc-DoS\n\n\n\nhttps://khesef.xyz/posts/D71359A7-6D08-41D4-8571-D7452ADF1C27", "creation_timestamp": "2026-07-22T16:45:13.246987Z"} {"uuid": "b6c23ff0-2644-4410-9641-8e2ec3c4b85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59200", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrariji2op2m", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9\u05d9\u05dc\u05d5\u05d8: CVE-2026-59200 - \u05d4\u05ea\u05e7\u05e4\u05ea \u05d3\u05d7\u05d9\u05e1\u05d4 \u05d7\u05e8\u05d9\u05d2\u05d4 \u05e9\u05d2\u05d5\u05e8\u05de\u05ea \u05dc-DoS\n\n\n\nhttps://khesef.xyz/posts/D71359A7-6D08-41D4-8571-D7452ADF1C27", "creation_timestamp": "2026-07-22T16:45:13.246987Z"} https://vulnerability.circl.lu/sighting/b6c23ff0-2644-4410-9641-8e2ec3c4b85f/export Wed, 22 Jul 2026 16:45:13 +0000 https://vulnerability.circl.lu/sighting/75e2b9a2-450b-4dbf-8d4c-2b09198e69f0/export {"uuid": "75e2b9a2-450b-4dbf-8d4c-2b09198e69f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59200", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrari2btle2h", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59200 \u0432 Pillow: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 PDF-\u0444\u0430\u0439\u043b\u044b\n\n\n\nhttps://kripta.biz/posts/C5C7DB50-439F-43C8-863D-7213B17CB517", "creation_timestamp": "2026-07-22T16:44:57.304163Z"} {"uuid": "75e2b9a2-450b-4dbf-8d4c-2b09198e69f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59200", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrari2btle2h", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59200 \u0432 Pillow: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 PDF-\u0444\u0430\u0439\u043b\u044b\n\n\n\nhttps://kripta.biz/posts/C5C7DB50-439F-43C8-863D-7213B17CB517", "creation_timestamp": "2026-07-22T16:44:57.304163Z"} https://vulnerability.circl.lu/sighting/75e2b9a2-450b-4dbf-8d4c-2b09198e69f0/export Wed, 22 Jul 2026 16:44:57 +0000 https://vulnerability.circl.lu/sighting/5aa1a833-4421-4f76-8f9b-1ffd9f05bac0/export {"uuid": "5aa1a833-4421-4f76-8f9b-1ffd9f05bac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59200", "type": "seen", "source": "https://gist.github.com/alon710/58614afe66c43fc333bb604ba1de657d", "content": "# CVE-2026-59200: CVE-2026-59200: Remote Denial of Service via PDF Decompression Bomb in Pillow\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59200\n\n## Summary\nCVE-2026-59200 is a high-severity uncontrolled resource consumption vulnerability in the Pillow Python Imaging Library. The flaw resides in the PDF stream decoder, allowing remote, unauthenticated attackers to trigger host out-of-memory crashes by submitting malicious PDF decompression bombs.\n\n## TL;DR\nUnbounded zlib decompression in Pillow's PDF parser allows remote attackers to cause system Out-of-Memory crashes using crafted PDF files.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS**: 7.5\n- **EPSS Score**: 0.0035\n- **Impact**: High (Denial of Service)\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Pillow (python-pillow)\n\n## Mitigation\n\n- Upgrade Pillow to version 12.3.0 or higher to resolve the unbounded decompression logic.\n- Enforce explicit format constraints using Image.open(formats=[...]) to block the PDF parser from initiating auto-detection.\n- Configure operating system and container limits to bound application memory consumption.\n\n**Remediation Steps:**\n1. Check active Pillow versions in your environment using `pip show Pillow`.\n2. Update dependencies and requirements configuration to lock Pillow to `>=12.3.0`.\n3. Deploy container resource limits in Kubernetes or systemd configuration files to mitigate memory exhaustion blast-radius.\n\n## References\n\n- [Official Fix Commit](https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09)\n- [Pillow Pull Request #9718](https://github.com/python-pillow/Pillow/pull/9718)\n- [GitHub Security Advisory GHSA-jjj6-mw9f-p565](https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565)\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-59200)\n- [Pillow Release Tag (12.3.0)](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [Wiz Vulnerability Analysis Database](https://www.wiz.io/vulnerability-database/cve/cve-2026-59200)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59200) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T09:31:09.630747Z"} {"uuid": "5aa1a833-4421-4f76-8f9b-1ffd9f05bac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59200", "type": "seen", "source": "https://gist.github.com/alon710/58614afe66c43fc333bb604ba1de657d", "content": "# CVE-2026-59200: CVE-2026-59200: Remote Denial of Service via PDF Decompression Bomb in Pillow\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59200\n\n## Summary\nCVE-2026-59200 is a high-severity uncontrolled resource consumption vulnerability in the Pillow Python Imaging Library. The flaw resides in the PDF stream decoder, allowing remote, unauthenticated attackers to trigger host out-of-memory crashes by submitting malicious PDF decompression bombs.\n\n## TL;DR\nUnbounded zlib decompression in Pillow's PDF parser allows remote attackers to cause system Out-of-Memory crashes using crafted PDF files.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS**: 7.5\n- **EPSS Score**: 0.0035\n- **Impact**: High (Denial of Service)\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Pillow (python-pillow)\n\n## Mitigation\n\n- Upgrade Pillow to version 12.3.0 or higher to resolve the unbounded decompression logic.\n- Enforce explicit format constraints using Image.open(formats=[...]) to block the PDF parser from initiating auto-detection.\n- Configure operating system and container limits to bound application memory consumption.\n\n**Remediation Steps:**\n1. Check active Pillow versions in your environment using `pip show Pillow`.\n2. Update dependencies and requirements configuration to lock Pillow to `>=12.3.0`.\n3. Deploy container resource limits in Kubernetes or systemd configuration files to mitigate memory exhaustion blast-radius.\n\n## References\n\n- [Official Fix Commit](https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09)\n- [Pillow Pull Request #9718](https://github.com/python-pillow/Pillow/pull/9718)\n- [GitHub Security Advisory GHSA-jjj6-mw9f-p565](https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565)\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-59200)\n- [Pillow Release Tag (12.3.0)](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [Wiz Vulnerability Analysis Database](https://www.wiz.io/vulnerability-database/cve/cve-2026-59200)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59200) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T09:31:09.630747Z"} https://vulnerability.circl.lu/sighting/5aa1a833-4421-4f76-8f9b-1ffd9f05bac0/export Tue, 21 Jul 2026 09:31:09 +0000 https://vulnerability.circl.lu/sighting/c6ee7f82-b4f6-4a17-b840-a28d764834fa/export {"uuid": "c6ee7f82-b4f6-4a17-b840-a28d764834fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59203", "type": "seen", "source": "https://gist.github.com/alon710/afd430e951c08264a9a3f3da451132a3", "content": "# CVE-2026-59203: CVE-2026-59203: Denial of Service via Infinite Loop in Pillow EPS Image Parser\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59203\n\n## Summary\nA denial-of-service (DoS) vulnerability in Pillow (Python Imaging Library) versions 12.0.0 through 12.2.0 allows unauthenticated remote attackers to trigger 100% CPU utilization and hang the processing thread. The issue occurs within the Encapsulated PostScript (EPS) image parser (PIL/EpsImagePlugin.py) due to missing validation on the byte count parsed from %%BeginBinary: comments, allowing negative values to cause an infinite backward stream seek loop. This formatting-level state-looping issue occurs during the initial format sniffing phase inside Image.open() and does not require the system Ghostscript interpreter to be executed or present. It is resolved in version 12.3.0.\n\n## TL;DR\nUnvalidated negative byte counts in Pillow's EPS image parser trigger an infinite backward stream-seek loop, resulting in 100% CPU utilization and application hang without requiring image rendering or a Ghostscript installation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.0039 (Percentile: 31.40%)\n- **Impact**: Denial of Service (Thread Hang / CPU Exhaustion)\n- **Exploit Status**: Proof-of-Concept (PoC) available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Pillow (python-pillow) version 12.0.0 through 12.2.0\n- **Pillow**: >= 12.0.0, < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade to Pillow version 12.3.0 or higher.\n- Restrict accepted formats when calling Image.open() to prevent automatic sniffing from executing the EPS parser.\n- Reject file uploads starting with PostScript headers (%!PS) at the web gateway or load balancer.\n- Isolate worker processes utilizing limits on containerized CPU and memory allocation to contain infinite-loop exploitation.\n\n**Remediation Steps:**\n1. Audit the environment to confirm the installed Pillow version using: pip show Pillow\n2. Execute: pip install --upgrade Pillow>=12.3.0 to install the patched package.\n3. Identify all locations utilizing Image.open() and constrain the acceptable format array (e.g., Image.open(f, formats=['PNG', 'JPEG'])).\n4. Ensure applications running image processing logic reside within limited container processes with resource constraints.\n\n## References\n\n- [GitHub Security Advisory GHSA-pg7v-jwj7-p798](https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798)\n- [Fix Commit](https://github.com/python-pillow/Pillow/commit/03992618118b4a76b6163cd72ab5ecd684133b83)\n- [Pillow Pull Request #9708](https://github.com/python-pillow/Pillow/pull/9708)\n- [Pillow Release 12.3.0](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-59203)\n- [NVD CVE-2026-59203](https://nvd.nist.gov/vuln/detail/CVE-2026-59203)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59203) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T08:31:39.762852Z"} {"uuid": "c6ee7f82-b4f6-4a17-b840-a28d764834fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59203", "type": "seen", "source": "https://gist.github.com/alon710/afd430e951c08264a9a3f3da451132a3", "content": "# CVE-2026-59203: CVE-2026-59203: Denial of Service via Infinite Loop in Pillow EPS Image Parser\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59203\n\n## Summary\nA denial-of-service (DoS) vulnerability in Pillow (Python Imaging Library) versions 12.0.0 through 12.2.0 allows unauthenticated remote attackers to trigger 100% CPU utilization and hang the processing thread. The issue occurs within the Encapsulated PostScript (EPS) image parser (PIL/EpsImagePlugin.py) due to missing validation on the byte count parsed from %%BeginBinary: comments, allowing negative values to cause an infinite backward stream seek loop. This formatting-level state-looping issue occurs during the initial format sniffing phase inside Image.open() and does not require the system Ghostscript interpreter to be executed or present. It is resolved in version 12.3.0.\n\n## TL;DR\nUnvalidated negative byte counts in Pillow's EPS image parser trigger an infinite backward stream-seek loop, resulting in 100% CPU utilization and application hang without requiring image rendering or a Ghostscript installation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.0039 (Percentile: 31.40%)\n- **Impact**: Denial of Service (Thread Hang / CPU Exhaustion)\n- **Exploit Status**: Proof-of-Concept (PoC) available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Pillow (python-pillow) version 12.0.0 through 12.2.0\n- **Pillow**: >= 12.0.0, < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade to Pillow version 12.3.0 or higher.\n- Restrict accepted formats when calling Image.open() to prevent automatic sniffing from executing the EPS parser.\n- Reject file uploads starting with PostScript headers (%!PS) at the web gateway or load balancer.\n- Isolate worker processes utilizing limits on containerized CPU and memory allocation to contain infinite-loop exploitation.\n\n**Remediation Steps:**\n1. Audit the environment to confirm the installed Pillow version using: pip show Pillow\n2. Execute: pip install --upgrade Pillow>=12.3.0 to install the patched package.\n3. Identify all locations utilizing Image.open() and constrain the acceptable format array (e.g., Image.open(f, formats=['PNG', 'JPEG'])).\n4. Ensure applications running image processing logic reside within limited container processes with resource constraints.\n\n## References\n\n- [GitHub Security Advisory GHSA-pg7v-jwj7-p798](https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798)\n- [Fix Commit](https://github.com/python-pillow/Pillow/commit/03992618118b4a76b6163cd72ab5ecd684133b83)\n- [Pillow Pull Request #9708](https://github.com/python-pillow/Pillow/pull/9708)\n- [Pillow Release 12.3.0](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-59203)\n- [NVD CVE-2026-59203](https://nvd.nist.gov/vuln/detail/CVE-2026-59203)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59203) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T08:31:39.762852Z"} https://vulnerability.circl.lu/sighting/c6ee7f82-b4f6-4a17-b840-a28d764834fa/export Tue, 21 Jul 2026 08:31:39 +0000 https://vulnerability.circl.lu/sighting/a4552de9-3f8a-4efe-a9a4-2d7bf43006e0/export {"uuid": "a4552de9-3f8a-4efe-a9a4-2d7bf43006e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59204", "type": "seen", "source": "https://gist.github.com/alon710/796ee0a4078a7a835fdac3bedcdff5ad", "content": "# CVE-2026-59204: CVE-2026-59204: Denial of Service via Memory Exhaustion in Pillow JPEG2000 Decoder\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59204\n\n## Summary\nA Denial of Service vulnerability exists in the JPEG2000 decoder of Pillow (versions 8.2.0 to 12.2.0) due to memory allocation state accumulation across tiles, leading to rapid process termination.\n\n## TL;DR\nA state accumulation bug in Pillow's JPEG2000 tile decoder allows unauthenticated attackers to crash applications via Out-of-Memory termination using crafted multi-tiled images.\n\n## Technical Details\n\n- **CWE ID**: CWE-789 / CWE-770\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS Score**: 7.5 (v3.1) / 8.7 (v4.0)\n- **EPSS Score**: 0.00398 (32.21% Percentile)\n- **Impact**: Denial of Service (OOM Crash)\n- **Exploit Status**: None / No Public Exploits\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- python-pillow/Pillow\n- **Pillow**: >= 8.2.0, < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade Pillow to version 12.3.0 or later.\n- Enforce format restrictions on Image.open() to disable JPEG2000 decoding.\n- Deploy isolated application processes with memory limit restrictions.\n\n**Remediation Steps:**\n1. Run 'pip install --upgrade Pillow>=12.3.0' in your Python environment.\n2. Update your codebase to pass a safe list of formats to the PIL open method: Image.open(stream, formats=['PNG', 'JPEG', 'GIF', 'WEBP']).\n3. Enforce container-level memory constraints using standard orchestration platforms.\n4. Deploy YARA signatures to detect JPEG2000 byte markers at the perimeter.\n\n## References\n\n- [GitHub Security Advisory GHSA-vjc4-5qp5-m44j](https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j)\n- [NVD CVE-2026-59204 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-59204)\n- [Official Security Fix Commit](https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca)\n- [Vulnerability Fix Pull Request (#9704)](https://github.com/python-pillow/Pillow/pull/9704)\n- [Pillow 12.3.0 Release Notes](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-59204)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59204) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T07:31:35.065313Z"} {"uuid": "a4552de9-3f8a-4efe-a9a4-2d7bf43006e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59204", "type": "seen", "source": "https://gist.github.com/alon710/796ee0a4078a7a835fdac3bedcdff5ad", "content": "# CVE-2026-59204: CVE-2026-59204: Denial of Service via Memory Exhaustion in Pillow JPEG2000 Decoder\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59204\n\n## Summary\nA Denial of Service vulnerability exists in the JPEG2000 decoder of Pillow (versions 8.2.0 to 12.2.0) due to memory allocation state accumulation across tiles, leading to rapid process termination.\n\n## TL;DR\nA state accumulation bug in Pillow's JPEG2000 tile decoder allows unauthenticated attackers to crash applications via Out-of-Memory termination using crafted multi-tiled images.\n\n## Technical Details\n\n- **CWE ID**: CWE-789 / CWE-770\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS Score**: 7.5 (v3.1) / 8.7 (v4.0)\n- **EPSS Score**: 0.00398 (32.21% Percentile)\n- **Impact**: Denial of Service (OOM Crash)\n- **Exploit Status**: None / No Public Exploits\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- python-pillow/Pillow\n- **Pillow**: >= 8.2.0, < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade Pillow to version 12.3.0 or later.\n- Enforce format restrictions on Image.open() to disable JPEG2000 decoding.\n- Deploy isolated application processes with memory limit restrictions.\n\n**Remediation Steps:**\n1. Run 'pip install --upgrade Pillow>=12.3.0' in your Python environment.\n2. Update your codebase to pass a safe list of formats to the PIL open method: Image.open(stream, formats=['PNG', 'JPEG', 'GIF', 'WEBP']).\n3. Enforce container-level memory constraints using standard orchestration platforms.\n4. Deploy YARA signatures to detect JPEG2000 byte markers at the perimeter.\n\n## References\n\n- [GitHub Security Advisory GHSA-vjc4-5qp5-m44j](https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j)\n- [NVD CVE-2026-59204 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-59204)\n- [Official Security Fix Commit](https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca)\n- [Vulnerability Fix Pull Request (#9704)](https://github.com/python-pillow/Pillow/pull/9704)\n- [Pillow 12.3.0 Release Notes](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-59204)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59204) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T07:31:35.065313Z"} https://vulnerability.circl.lu/sighting/a4552de9-3f8a-4efe-a9a4-2d7bf43006e0/export Tue, 21 Jul 2026 07:31:35 +0000 https://vulnerability.circl.lu/sighting/27efa8a3-aa52-4ff8-9b30-b0b72993c076/export {"uuid": "27efa8a3-aa52-4ff8-9b30-b0b72993c076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59205", "type": "seen", "source": "https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724", "content": "# CVE-2026-59205: CVE-2026-59205: Heap-Based Buffer Overflow in Pillow ImageCms Module\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59205\n\n## Summary\nCVE-2026-59205 is a high-severity heap-based out-of-bounds write vulnerability affecting Pillow prior to version 12.3.0. The flaw stems from a validation omission in the ImageCmsTransform class where source and destination image modes are not checked against the configurations defined during the creation of the transform. An attacker can exploit this discrepancy to trigger a heap buffer overflow or an out-of-bounds read by supplying an under-allocated target image buffer.\n\n## TL;DR\nA heap-based buffer overflow exists in Pillow prior to 12.3.0's ImageCms module. Lacking verification of image modes allows writing multi-byte output data into under-allocated buffers, potentially enabling remote code execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-787\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 7.5 (High)\n- **Impact**: Availability (High)\n- **Exploit Status**: Proof of Concept available in tests\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Pillow (Python Imaging Library)\n- **Pillow**: < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade Pillow to version 12.3.0 or later to ensure Python-level mode checks are actively enforced.\n- Implement strong input validation to verify that uploaded image data conforms to strict physical and structural parameters before executing color translations.\n- Sanitize and restrict the use of custom image subclasses in transformation pipelines to block mock objects from bypassing mode property assertions.\n\n**Remediation Steps:**\n1. Run your package manager upgrade command: pip install --upgrade Pillow>=12.3.0\n2. Identify all code locations invoking ImageCms.buildTransform or executing ImageCmsTransform.apply.\n3. Ensure any custom-allocated destination buffers (imOut) have their modes programmatically validated against the expected target output prior to calling transform methods.\n\n## References\n\n- [GitHub Security Advisory GHSA-9hw9-ch79-4vh6](https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6)\n- [Pillow Patch Commit](https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721)\n- [Pillow Pull Request #9715](https://github.com/python-pillow/Pillow/pull/9715)\n- [Pillow 12.3.0 Release Notes](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [NVD CVE-2026-59205 Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-59205)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-59205)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59205) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T06:31:17.347878Z"} {"uuid": "27efa8a3-aa52-4ff8-9b30-b0b72993c076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59205", "type": "seen", "source": "https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724", "content": "# CVE-2026-59205: CVE-2026-59205: Heap-Based Buffer Overflow in Pillow ImageCms Module\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59205\n\n## Summary\nCVE-2026-59205 is a high-severity heap-based out-of-bounds write vulnerability affecting Pillow prior to version 12.3.0. The flaw stems from a validation omission in the ImageCmsTransform class where source and destination image modes are not checked against the configurations defined during the creation of the transform. An attacker can exploit this discrepancy to trigger a heap buffer overflow or an out-of-bounds read by supplying an under-allocated target image buffer.\n\n## TL;DR\nA heap-based buffer overflow exists in Pillow prior to 12.3.0's ImageCms module. Lacking verification of image modes allows writing multi-byte output data into under-allocated buffers, potentially enabling remote code execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-787\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 7.5 (High)\n- **Impact**: Availability (High)\n- **Exploit Status**: Proof of Concept available in tests\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Pillow (Python Imaging Library)\n- **Pillow**: < 12.3.0 (Fixed in: `12.3.0`)\n\n## Mitigation\n\n- Upgrade Pillow to version 12.3.0 or later to ensure Python-level mode checks are actively enforced.\n- Implement strong input validation to verify that uploaded image data conforms to strict physical and structural parameters before executing color translations.\n- Sanitize and restrict the use of custom image subclasses in transformation pipelines to block mock objects from bypassing mode property assertions.\n\n**Remediation Steps:**\n1. Run your package manager upgrade command: pip install --upgrade Pillow>=12.3.0\n2. Identify all code locations invoking ImageCms.buildTransform or executing ImageCmsTransform.apply.\n3. Ensure any custom-allocated destination buffers (imOut) have their modes programmatically validated against the expected target output prior to calling transform methods.\n\n## References\n\n- [GitHub Security Advisory GHSA-9hw9-ch79-4vh6](https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6)\n- [Pillow Patch Commit](https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721)\n- [Pillow Pull Request #9715](https://github.com/python-pillow/Pillow/pull/9715)\n- [Pillow 12.3.0 Release Notes](https://github.com/python-pillow/Pillow/releases/tag/12.3.0)\n- [NVD CVE-2026-59205 Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-59205)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-59205)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59205) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T06:31:17.347878Z"} https://vulnerability.circl.lu/sighting/27efa8a3-aa52-4ff8-9b30-b0b72993c076/export Tue, 21 Jul 2026 06:31:17 +0000 https://vulnerability.circl.lu/sighting/043ba9d8-16aa-43b0-8cbb-4caf528de267/export {"uuid": "043ba9d8-16aa-43b0-8cbb-4caf528de267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59200", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565", "content": "", "creation_timestamp": "2026-07-21T00:35:14.879027Z"} {"uuid": "043ba9d8-16aa-43b0-8cbb-4caf528de267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59200", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565", "content": "", "creation_timestamp": "2026-07-21T00:35:14.879027Z"} https://vulnerability.circl.lu/sighting/043ba9d8-16aa-43b0-8cbb-4caf528de267/export Tue, 21 Jul 2026 00:35:14 +0000