[Git][security-tracker-team/security-tracker][master] new pillow issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
47ea1548 by Moritz Muehlenhoff at 2026-10-22T20:03:54+02:00
new pillow issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -545,7 +545,10 @@ CVE-2026-114509 (Laravel is a web application framework. Prior to 12.68.0 and 13
 CVE-2026-114508 (Laravel is a web application framework. From 12.45.0 until 12.68.0 and ...)
 	NOT-FOR-US: Laravel
 CVE-2026-114501 (Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow ex ...)
-	TODO: check
+	- pillow 13.0.0-1
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-654x-cwwv-5j9c
+	NOTE: https://github.com/python-pillow/Pillow/pull/10172
+	NOTE: https://github.com/python-pillow/Pillow/commit/19f64946eb247b973dd4560be7dea3bf979d2e6a (13.0.0)
 CVE-2026-114493 (LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery  ...)
 	NOT-FOR-US: LocalAI
 CVE-2026-114492 (gin-vue-admin through 2.9.2 contains a path traversal vulnerability th ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/47ea1548d489304a969881888608571f040e41ea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/47ea1548d489304a969881888608571f040e41ea
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/f4442fde/attachment.htm>