High DSA-6147-1 1 CVE

pillow - security update

Published Feb 20, 2026 · Updated Feb 20, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 13	pillow	11.1.0-5+deb13u1

Vulnerabilities 1

High 8.6

CVE-2026-25990

Pillow has an out-of-bounds write when loading PSD images

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

python-pillow Pillow open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Alpine Wolfi PyPI

Feb 11, 2026