{"vulnerability": "CVE-2026-55379", "sightings": [{"uuid": "be705bd9-982c-44bd-aed9-a9a3ae1e94ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55379", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z", "content": "CVE-2026-55379 - Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` \u2014 bomb protection bypass via font loading\nCVE ID : CVE-2026-55379\n \n Published : July 6, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Pillow is a Python imaging library. Prior...", "creation_timestamp": "2026-07-06T20:26:52.504108Z"}, {"uuid": "95aef2e8-2cb5-4de2-9f61-102578b63cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55379", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc", "content": "", "creation_timestamp": "2026-07-20T22:37:42.210019Z"}]}