product of python

pillow

2 thingsrelated by NVD

Severity

Being told

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing CVE-2026-40192	Severity high
pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image CVE-2026-25990	Severity high