Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #4

High-severity vulnerability disclosed in Python Pillow imaging library

Original: 🚨 EUVD-2026-104635 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: Pillow 🏢 Vendor: python-pillow 📅 Updated: 2026-10-21 📝 Pillow:

A new vulnerability, EUVD-2026-104635, has been catalogued in Pillow, the widely used Python image processing library, with a CVSS v3.1 score of 8.7. The flaw lies in APNG background disposal, which allocates the full canvas before the decompression bomb check runs, potentially enabling denial-of-service via memory exhaustion. Security teams are being urged to review affected versions.

Why now: Pillow is used across countless Python applications, so a high-severity flaw with denial-of-service potential prompts immediate attention from developers and security teams.

Pillowpython-pillowENISAEUVD

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 2 d ago to 2 d ago.

Evidence

• 🚨 EUVD-2026-104635 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: Pillow 🏢 Vendor: python-pillow 📅 Updated: 2026-10-21 📝 Pillow: APNG background disposal allocates full canvas before decompression bomb check 🔗 https:// euvd.enisa.europa.eu/vulnerabi lity/EUVD-2026-104635 #… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3167936