# PyPI Advisories.

Every PyPI Advisory we hold (Python), newest first.

## Records, newest first (an older page)

- [Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution](https://agentprime.io/advisories/GHSA-5x8w-8jj5-q52h.md)
  `GHSA-5x8w-8jj5-q52h`, `BIT-pillow-2026-112398`, `CVE-2026-112398`, `PYSEC-2026-4330` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption
- [Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1](https://agentprime.io/advisories/GHSA-654x-cwwv-5j9c.md)
  `GHSA-654x-cwwv-5j9c`, `BIT-pillow-2026-114501`, `CVE-2026-114501`, `PYSEC-2026-4336` · PyPI `pillow`: affected `>=11.2.1, <13.0.0`, fixed in `13.0.0` · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption, CWE-226
- [setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description](https://agentprime.io/advisories/GHSA-xmj3-9gf7-h52w.md)
  `GHSA-xmj3-9gf7-h52w` · PyPI `setuptools`: affected `>=38.2.2, <84.1.0`, fixed in `84.1.0` · CVSS 4.0, no score published · Not analysed yet · Published 23 Oct 2026 · Tags: Path traversal
- [FastMCP: Post-transform component authorization is skipped on direct calls](https://agentprime.io/advisories/GHSA-7xgj-8392-5q4r.md)
  `GHSA-7xgj-8392-5q4r` · PyPI `fastmcp` and 1 more: affected `>=3.0.0, <3.4.10 || >=4.0.0, <4.1.2`, fixed in `3.4.10`, `4.1.2` · CVSS 6.8 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Broken access control
- [FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server](https://agentprime.io/advisories/GHSA-vqqp-x5qm-5qp4.md)
  `GHSA-vqqp-x5qm-5qp4` · PyPI `fastmcp` and 1 more: affected `>=4.0.0a1, <4.1.2`, fixed in `4.1.2` · CVSS 5.9 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Authentication bypass, Hard-coded credentials
- [vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)](https://agentprime.io/advisories/GHSA-gx7p-2j49-hfq4.md)
  `GHSA-gx7p-2j49-hfq4`, `CVE-2026-114055` · PyPI `vllm`: affected `>=0.7.3, <0.31.0`, fixed in `0.31.0` · CVSS 8.7 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [pypdf: Possible long runtimes for repeated references to the same missing object](https://agentprime.io/advisories/GHSA-6c7f-9265-g8fw.md)
  `GHSA-6c7f-9265-g8fw`, `CVE-2026-115572` · PyPI `pypdf`: affected `<6.21.2`, fixed in `6.21.2` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)](https://agentprime.io/advisories/GHSA-jr96-gvgh-j3r4.md)
  `GHSA-jr96-gvgh-j3r4`, `CVE-2026-115585` · PyPI `pypdf`: affected `<6.21.2`, fixed in `6.21.2` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [pypdf: Possible long runtimes for large xref table header limits](https://agentprime.io/advisories/GHSA-gmh7-3g9r-mjh5.md)
  `GHSA-gmh7-3g9r-mjh5`, `CVE-2026-115580` · PyPI `pypdf`: affected `<6.21.2`, fixed in `6.21.2` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [Strands Agents SDK: Exposure of data element to wrong session in the A2A Server](https://agentprime.io/advisories/GHSA-4v6f-7vjh-6x4m.md)
  `GHSA-4v6f-7vjh-6x4m`, `CVE-2026-115419` · npm `@strands-agents/sdk` and 1 more: affected `<1.5.0`, fixed in `1.5.0` · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-488
- [virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)](https://agentprime.io/advisories/GHSA-cx6f-vjhg-g3cc.md)
  `GHSA-cx6f-vjhg-g3cc`, `BIT-virtualenv-2026-115586`, `CVE-2026-115586` · PyPI `virtualenv`: affected `>=21.14.9, <21.14.13`, fixed in `21.14.13` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [Mistune: Path Traversal and XSS in Include directive](https://agentprime.io/advisories/GHSA-h7ww-273w-6cm8.md)
  `GHSA-h7ww-273w-6cm8`, `CVE-2026-115355` · PyPI `mistune`: affected `<3.3.0`, fixed in `3.3.0` · CVSS 8.7 High · Not analysed yet · Published 23 Oct 2026 · Tags: Path traversal
- [Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH](https://agentprime.io/advisories/GHSA-2qrf-pqgx-qh9v.md)
  `GHSA-2qrf-pqgx-qh9v`, `CVE-2026-115774` · PyPI `twisted`: affected `<26.10.0rc1`, fixed in `26.10.0rc1` · CVSS 4.9 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer](https://agentprime.io/advisories/GHSA-53xc-49m8-p798.md)
  `GHSA-53xc-49m8-p798`, `CVE-2026-115776` · PyPI `twisted`: affected `<26.10.0rc1`, fixed in `26.10.0rc1` · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer](https://agentprime.io/advisories/GHSA-cwm5-jh59-mwxr.md)
  `GHSA-cwm5-jh59-mwxr`, `CVE-2026-115778` · PyPI `twisted`: affected `<26.10.0rc1`, fixed in `26.10.0rc1` · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree](https://agentprime.io/advisories/GHSA-3476-c5c2-fr73.md)
  `GHSA-3476-c5c2-fr73`, `CVE-2026-115775` · PyPI `twisted`: affected `<26.10.0rc1`, fixed in `26.10.0rc1` · CVSS 8.7 High · Not analysed yet · Published 23 Oct 2026 · Tags: Denial of service
- [Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value](https://agentprime.io/advisories/GHSA-q7qq-6mhp-9rc4.md)
  `GHSA-q7qq-6mhp-9rc4`, `CVE-2026-115877` · PyPI `twisted`: affected `<26.10.0rc1`, fixed in `26.10.0rc1` · CVSS 5.4 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: HTTP request smuggling
- [vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine](https://agentprime.io/advisories/GHSA-p92p-rxj5-7p2x.md)
  `GHSA-p92p-rxj5-7p2x`, `CVE-2026-114050` · PyPI `vllm`: affected `<0.31.0`, fixed in `0.31.0` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-345
- [Duplicate Advisory: Mistune: Path Traversal and XSS in Include directive](https://agentprime.io/advisories/GHSA-8cqv-vvq2-6p8c.md)
  `GHSA-8cqv-vvq2-6p8c` · PyPI `mistune`: affected `*`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal
- [virtualenv: Generated files can follow existing destination links](https://agentprime.io/advisories/GHSA-558c-9hv2-4prj.md)
  `GHSA-558c-9hv2-4prj`, `BIT-virtualenv-2026-113721`, `CVE-2026-113721` · PyPI `virtualenv`: affected `<21.14.9`, fixed in `21.14.9` · CVSS 4.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal
- [Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()](https://agentprime.io/advisories/GHSA-78g4-xqwv-q3g8.md)
  `GHSA-78g4-xqwv-q3g8` · PyPI `pillow`: affected `>=11.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption, CWE-1395
- [pypdf: Possible long runtimes/large memory usage when retrieving form fields](https://agentprime.io/advisories/GHSA-6vvc-x485-93v7.md)
  `GHSA-6vvc-x485-93v7`, `CVE-2026-113789` · PyPI `pypdf`: affected `<6.21.0`, fixed in `6.21.0` · CVSS 6.0 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [pypdf: Possible large memory usage when parsing arrays and dictionaries](https://agentprime.io/advisories/GHSA-f54x-cmq8-qg57.md)
  `GHSA-f54x-cmq8-qg57`, `CVE-2026-113790` · PyPI `pypdf`: affected `<6.21.0`, fixed in `6.21.0` · CVSS 6.0 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [pypdf: Possible large memory usage when parsing content streams](https://agentprime.io/advisories/GHSA-cgf9-327m-v77c.md)
  `GHSA-cgf9-327m-v77c`, `CVE-2026-113791` · PyPI `pypdf`: affected `<6.21.0`, fixed in `6.21.0` · CVSS 6.0 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [GitPython validates a submodule's ".git" path only after cloning into it (RCE)](https://agentprime.io/advisories/GHSA-83vg-56qc-22m7.md)
  `GHSA-83vg-56qc-22m7`, `CVE-2026-114145` · PyPI `gitpython`: affected `<3.2.1`, fixed in `3.2.1` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-696
- [GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit](https://agentprime.io/advisories/GHSA-r77w-qph3-7vf8.md)
  `GHSA-r77w-qph3-7vf8`, `CVE-2026-75508` · PyPI `graphql-core`: affected `>=3.2.3, <3.2.12 || >=3.3.0a3, <3.3.0rc1`, fixed in `3.2.12`, `3.3.0rc1` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule](https://agentprime.io/advisories/GHSA-vj8h-fx38-h3vc.md)
  `GHSA-vj8h-fx38-h3vc`, `CVE-2026-75507` · PyPI `graphql-core`: affected `>=3.0.0, <3.2.12 || >=3.3.0a1, <3.3.0rc1`, fixed in `3.2.12`, `3.3.0rc1` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc](https://agentprime.io/advisories/GHSA-pjvx-prjx-h659.md)
  `GHSA-pjvx-prjx-h659`, `CVE-2026-114140` · PyPI `nbconvert`: affected `>=5.4.0, <7.17.2`, fixed in `7.17.2` · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal
- [OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api](https://agentprime.io/advisories/GHSA-xcq7-p3pf-p88h.md)
  `GHSA-xcq7-p3pf-p88h`, `CVE-2026-114603` · PyPI `opentelemetry-api`: affected `<1.45.1`, fixed in `1.45.1` · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Black: GitHub Action installs unvalidated required-version from pyproject.toml](https://agentprime.io/advisories/GHSA-cg8m-r9f2-5wm2.md)
  `GHSA-cg8m-r9f2-5wm2`, `CVE-2026-114134` · PyPI `black`: affected `<26.10.1`, fixed in `26.10.1` · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-829
- [Django REST framework: TokenProxy.delete() reports success and revokes nothing](https://agentprime.io/advisories/GHSA-xw6w-gcfp-cf8m.md)
  `GHSA-xw6w-gcfp-cf8m`, `CVE-2026-114137` · PyPI `djangorestframework`: affected `>=3.12.0, <3.18.2`, fixed in `3.18.2` · CVSS 7.4 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass, CWE-390
- [Django REST framework: Accept header with many large quoted parameters burns \~19s of CPU per request in content negotiation](https://agentprime.io/advisories/GHSA-33wh-fxxf-88vv.md)
  `GHSA-33wh-fxxf-88vv`, `CVE-2026-114138` · PyPI `djangorestframework`: affected `<3.18.2`, fixed in `3.18.2` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Django REST framework: JSONParser applies an attacker-named codec to the request stream](https://agentprime.io/advisories/GHSA-3547-9m27-7rxg.md)
  `GHSA-3547-9m27-7rxg`, `CVE-2026-114136` · PyPI `djangorestframework`: affected `>=3.6.4, <3.18.2`, fixed in `3.18.2` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service, CWE-409
- [Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer](https://agentprime.io/advisories/GHSA-g7cr-3p24-7wf7.md)
  `GHSA-g7cr-3p24-7wf7`, `BIT-pillow-2026-96778`, `CVE-2026-96778` · PyPI `pillow`: affected `>=9.4.0, <13.0.0`, fixed in `13.0.0` · CVSS 7.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption
- [Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)](https://agentprime.io/advisories/GHSA-9v9v-9qvf-h2hj.md)
  `GHSA-9v9v-9qvf-h2hj`, `BIT-pillow-2026-96644`, `CVE-2026-96644`, `PYSEC-2026-4343` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption
- [Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time](https://agentprime.io/advisories/GHSA-g4qv-2jxx-769h.md)
  `GHSA-g4qv-2jxx-769h`, `BIT-pillow-2026-96643`, `CVE-2026-96643`, `PYSEC-2026-4342` · PyPI `pillow`: affected `>=11.0.0, <13.0.0`, fixed in `13.0.0` · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Pillow: TarIO negative size field causes infinite CPU-spin loop](https://agentprime.io/advisories/GHSA-3j72-p6qg-6xp7.md)
  `GHSA-3j72-p6qg-6xp7`, `BIT-pillow-2026-96642`, `CVE-2026-96642`, `PYSEC-2026-4341` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise](https://agentprime.io/advisories/GHSA-4rm8-3hmm-39fg.md)
  `GHSA-4rm8-3hmm-39fg`, `BIT-pillow-2026-96641`, `CVE-2026-96641`, `PYSEC-2026-4340` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption
- [Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion](https://agentprime.io/advisories/GHSA-mrfp-p49p-3hf2.md)
  `GHSA-mrfp-p49p-3hf2`, `BIT-pillow-2026-96640`, `CVE-2026-96640` · PyPI `pillow`: affected `>=5.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Pillow multi-frame loaders can reuse stale native image storage after mode transitions](https://agentprime.io/advisories/GHSA-v9pv-5gc8-w2m6.md)
  `GHSA-v9pv-5gc8-w2m6`, `BIT-pillow-2026-96639`, `CVE-2026-96639`, `PYSEC-2026-4339` · PyPI `pillow`: affected `>=11.0.0, <13.0.0`, fixed in `13.0.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption
- [Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode](https://agentprime.io/advisories/GHSA-24rc-8hj2-v98c.md)
  `GHSA-24rc-8hj2-v98c`, `BIT-pillow-2026-96638`, `CVE-2026-96638` · PyPI `pillow`: affected `>=9.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS](https://agentprime.io/advisories/GHSA-g842-9rc4-69pw.md)
  `GHSA-g842-9rc4-69pw`, `BIT-pillow-2026-96637`, `CVE-2026-96637`, `PYSEC-2026-4338` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service, CWE-409
- [Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)](https://agentprime.io/advisories/GHSA-p8hx-v2p6-rp84.md)
  `GHSA-p8hx-v2p6-rp84`, `BIT-pillow-2026-96636`, `CVE-2026-96636`, `PYSEC-2026-4337` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service, CWE-409
- [PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery](https://agentprime.io/advisories/GHSA-pxh4-856f-4h89.md)
  `GHSA-pxh4-856f-4h89` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 7.4 High · Not analysed yet · Published 22 Oct 2026 · Tags: Weak cryptography or TLS
- [Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization](https://agentprime.io/advisories/GHSA-354v-3q48-cv69.md)
  `GHSA-354v-3q48-cv69`, `CVE-2026-114135` · PyPI `jupyter-server`: affected `>=2.0.0, <2.6.0`, fixed in `2.6.0` · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: Broken access control
- [mem0ai Databricks vector store vulnerable to SQL injection](https://agentprime.io/advisories/GHSA-7587-9684-52r6.md)
  `GHSA-7587-9684-52r6`, `CVE-2026-115324` · PyPI `mem0ai`: affected `>=0.1.117, <1.0.8`, fixed in `1.0.8` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: SQL injection
- [virtualenv: Builtin creation follows linked environment directories](https://agentprime.io/advisories/GHSA-cw65-gx24-rc82.md)
  `GHSA-cw65-gx24-rc82`, `BIT-virtualenv-2026-113716`, `CVE-2026-113716` · PyPI `virtualenv`: affected `<21.14.9`, fixed in `21.14.9` · CVSS 4.5 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal
- [virtualenv: Deletion recovery can change a symlink target's mode](https://agentprime.io/advisories/GHSA-43mp-35q3-x3fq.md)
  `GHSA-43mp-35q3-x3fq`, `BIT-virtualenv-2026-113724`, `CVE-2026-113724` · PyPI `virtualenv`: affected `<21.14.9`, fixed in `21.14.9` · CVSS 4.5 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal
- [virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax](https://agentprime.io/advisories/GHSA-c978-59m8-c77v.md)
  `GHSA-c978-59m8-c77v`, `BIT-virtualenv-2026-113722`, `CVE-2026-113722` · PyPI `virtualenv`: affected `<21.14.9`, fixed in `21.14.9` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection
- [Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags](https://agentprime.io/advisories/GHSA-xvh5-g6gv-559v.md)
  `GHSA-xvh5-g6gv-559v`, `CVE-2026-112902` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 8.3 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-686
- [Pillow: Heap buffer overflow in \_tiffWriteProc when saving TIFF to BytesIO](https://agentprime.io/advisories/GHSA-332p-7hrc-92wf.md)
  `GHSA-332p-7hrc-92wf`, `BIT-pillow-2026-112393`, `CVE-2026-112393` · PyPI `pillow`: affected `>=2.0.0, <13.0.0`, fixed in `13.0.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer](https://agentprime.io/advisories/GHSA-4rr5-89j8-mwwm.md)
  `GHSA-4rr5-89j8-mwwm`, `BIT-pillow-2026-112396`, `CVE-2026-112396`, `PYSEC-2026-4328` · PyPI `pillow`: affected `>=11.3.0, <13.0.0`, fixed in `13.0.0` · CVSS 5.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle](https://agentprime.io/advisories/GHSA-f2g6-542v-9j58.md)
  `GHSA-f2g6-542v-9j58`, `BIT-pillow-2026-112406`, `CVE-2026-112406` · PyPI `pillow`: affected `>=5.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Pillow: APNG background disposal allocates full canvas before decompression bomb check](https://agentprime.io/advisories/GHSA-5xm2-6676-qcp9.md)
  `GHSA-5xm2-6676-qcp9`, `BIT-pillow-2026-112399`, `CVE-2026-112399` · PyPI `pillow`: affected `>=8.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Pillow: MSP RLE decoder expands a tiny file into unbounded memory](https://agentprime.io/advisories/GHSA-gg2r-wvfm-q9rx.md)
  `GHSA-gg2r-wvfm-q9rx`, `BIT-pillow-2026-112892`, `CVE-2026-112892` · PyPI `pillow`: affected `>=4.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-409
- [Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)](https://agentprime.io/advisories/GHSA-jg86-v3jv-hrpm.md)
  `GHSA-jg86-v3jv-hrpm`, `BIT-pillow-2026-112894`, `CVE-2026-112894` · PyPI `pillow`: affected `>=5.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()](https://agentprime.io/advisories/GHSA-254f-3936-288h.md)
  `GHSA-254f-3936-288h`, `BIT-pillow-2026-112391`, `CVE-2026-112391` · PyPI `pillow`: affected `>=5.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 6.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes](https://agentprime.io/advisories/GHSA-xgh8-jp6q-p5x8.md)
  `GHSA-xgh8-jp6q-p5x8`, `BIT-pillow-2026-112901`, `CVE-2026-112901`, `PYSEC-2026-4335` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Pillow: Image.quantize() with empty palette leaks uninitialized stack memory](https://agentprime.io/advisories/GHSA-rfgq-q3w2-pmv2.md)
  `GHSA-rfgq-q3w2-pmv2`, `BIT-pillow-2026-112898`, `CVE-2026-112898` · PyPI `pillow`: affected `>=9.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()](https://agentprime.io/advisories/GHSA-74r2-7ff9-mjj2.md)
  `GHSA-74r2-7ff9-mjj2`, `BIT-pillow-2026-112401`, `CVE-2026-112401` · PyPI `pillow`: affected `>=5.4.0, <13.0.0`, fixed in `13.0.0` · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/ecosystem/pypi.md>
Older: <https://agentprime.io/advisories/ecosystem/pypi.md?cursor=WyIyMDI2LTEwLTIxVDIwOjQyOjExLjAwMDAwMFoiLCJHSFNBLTc0cjItN2ZmOS1tamoyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=PyPI&cursor=WyIyMDI2LTEwLTIzVDIxOjU5OjA4LjAwMDAwMFoiLCJHSFNBLXY0eDgtM3dyNS0zd3E4Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/pypi/?cursor=WyIyMDI2LTEwLTIzVDIxOjU5OjA4LjAwMDAwMFoiLCJHSFNBLXY0eDgtM3dyNS0zd3E4Il0>. Everything for agents: <https://agentprime.io/llms.txt>.