Medium
CVE-2026-113721
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
Medium
CVE-2026-113716
virtualenv: Builtin creation follows linked environment directories
Medium
CVE-2026-112898
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
Medium
CVE-2026-112901
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Medium
CVE-2026-112899
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
Medium
CVE-2026-112891
Pillow: Quadratic GIF comment copying during save
A vulnerability in Pillow causes repeated copying of long comments when saving GIF images. This can lead to excessive CPU consumption and potential denial of service when processing untrusted image uploads.
Medium
CVE-2026-112394
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
An out-of-bounds read vulnerability in Pillow allows certain decoders to read heap memory past the end of a buffer when processing specific image dimensions. This may disclose adjacent memory into decoded pixel data or cause an application crash.
High
CVE-2026-112392
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Applying rank, median, minimum, or maximum filters to zero-width or zero-height images in Pillow triggers a NULL pointer dereference in ImagingExpand, causing Python worker processes to crash and enabling denial of service.
High
CVE-2026-112390
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
A vulnerability in Pillow allows crafted Microsoft Image Composer (MIC) files with embedded TIFF streams to cause an infinite loop and 100% CPU usage when checking frame counts, leading to denial of service in environments with olefile installed.
High
CVE-2026-112405
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
A NULL pointer dereference vulnerability in Pillow allows remote attackers to cause a denial of service (process crash) via crafted image files processed through the IPTC loader and Image.merge routine.
High
CVE-2026-112893
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
A vulnerability in Pillow allows an invalid or double free when rendering text with a stroke from untrusted fonts, potentially leading to memory corruption or crashes.
Critical
CVE-2026-112900
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
Pillow lacks sanitization when constructing Ghostscript commands from input filenames, permitting command-line argument injection that can be escalated to remote code execution.
Medium
CVE-2026-113794
pypdf: Possible infinite loop when hitting EOF in standard xref table
An attacker can trigger an infinite loop in pypdf by supplying a crafted, incomplete PDF file that terminates inside the xref table.
High
CVE-2026-113732
virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
A command injection vulnerability in virtualenv's activate.fish script allows arbitrary command execution if an environment path or prompt contains a backslash before a quote. Fixed in version 21.14.2.
Medium
CVE-2026-113793
pypdf: Possible infinite loop when removing tree items
A vulnerability in pypdf allows an attacker to cause an infinite loop by providing a crafted PDF when an object, such as an outline item, is removed from a tree.
Medium
CVE-2026-113792
pypdf: Possible infinite loop in PdfWriter.find_outline_item
A vulnerability in pypdf allows attackers to craft a malicious PDF document that triggers an infinite loop when processing outline items, potentially causing a denial of service.
High
CVE-2026-113776
virtualenv activation scripts run code from a path that contains a placeholder name
A vulnerability in virtualenv activation scripts allows arbitrary code execution if an environment path or prompt contains placeholder names. Activating a maliciously crafted virtual environment can cause the generated script to execute unintended commands.
Medium
CVE-2026-113795
pypdf: Possible large memory usage for streams with multiple filters
A vulnerability in pypdf allows attackers to trigger excessive memory consumption by supplying crafted PDF streams configured with numerous or data-heavy filters.
Critical
CVE-2026-112403
Pillow: Heap buffer overflow in ImagingJpegDecode
A heap buffer overflow vulnerability in Pillow allows attackers to cause out-of-bounds writes when decoding specially crafted lossless JPEG images using draft scaling. This issue occurs when libjpeg-turbo silently ignores scaling requests, leading to memory corruption or crashes.
High
CVE-2026-112895
Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
Unbounded recursion in Pillow when parsing PDF page trees or trailer chains can cause severe CPU and memory exhaustion or crashes during PDF append operations.
High
CVE-2026-112400
Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
An issue in Pillow allows a maliciously crafted GIF to cause excessive memory allocation when an application handles decompression errors during frame seeking and reuses the image object. This can lead to memory exhaustion and denial of service.
High
CVE-2026-112397
Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
Pillow is vulnerable to an out-of-bounds write when processing zero-width PPM or PGM images during morphology operations. Opening a specially crafted image can cause an application crash and potential memory corruption.
Medium
CVE-2026-112395
Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
An out-of-bounds read vulnerability in Pillow's tiled-TIFF decoder can allow a specially crafted TIFF image to crash the process or expose adjacent heap memory into the decoded pixel buffer.
Medium
CVE-2026-111065
aiohttp: Connector pool exhaustion via Max-Age overflow
An overflow in aiohttp during Max-Age processing can prevent connections from closing properly, allowing an attacker to temporarily exhaust the connector pool until garbage collection runs.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.