Pillow

Everything SecOps Monitor has reported about Pillow: 2 stories, newest first. Part of our Vulnerabilities coverage.

How does CVE-2026-96637 enable crafted SPIDER files to bypass memory limits in Pillow?

A high-severity flaw in Pillow allows crafted SPIDER files to trigger massive memory allocations, bypassing standard safety limits in versions prior to 13.0.0.

Oct 22, 2026

Vulnerabilities

Does Your Python App Need the Pillow 13.0.0 Update to Fix Windows EMF CVE-2026-96644?

A patched version of the Python image library addresses a high-severity heap over-read in Windows EMF processing that arises from dimension truncation errors.

Oct 22, 2026