chore(deps): update dependency pillow to v12.3.0 [security] #142

Merged

alpha-nerd merged 1 commit from renovate/pypi-pillow-vulnerability into main 2026-07-14 13:58:42 +02:00

Conversation 0 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-07-13 11:33:47 +02:00

Collaborator

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
pillow (changelog)	==12.2.0 → ==12.3.0

---

BIT-pillow-2026-54059 / CVE-2026-54059 / GHSA-8v84-f9pq-wr9x / PYSEC-2026-2253

More information

Details

Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

• https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst
• https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d
• https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-pillow-2026-54060 / CVE-2026-54060 / GHSA-5x94-69rx-g8h2 / PYSEC-2026-2254

More information

Details

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

• https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst
• https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d
• https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-pillow-2026-55379 / CVE-2026-55379 / GHSA-45hq-cxwh-f6vc / PYSEC-2026-2255

More information

Details

Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow's documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

• https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst
• https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d
• https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-pillow-2026-55380 / CVE-2026-55380 / GHSA-phj9-mv4w-65pm / PYSEC-2026-2256

More information

Details

Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

• https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst
• https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675
• https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

BIT-pillow-2026-55798 / CVE-2026-55798 / GHSA-4x4j-2g7c-83w6 / PYSEC-2026-2257

More information

Details

Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result to subprocess.Popen(..., shell=True), allowing shell metacharacters in the file path to inject arbitrary cmd.exe commands. This issue is fixed in version 12.3.0.

Severity

• CVSS Score: 4.5 / 10 (Medium)
• Vector String: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

References

• https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst
• https://github.com/python-pillow/Pillow/commit/8404ea5fe5df40fc34aa1e51403dd6fce0778b8a
• https://github.com/python-pillow/Pillow/commit/88194166691b7b603529b8b036ab3ab9cedd2de4
• https://github.com/python-pillow/Pillow/commit/b0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f
• https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

Release Notes

python-pillow/Pillow (pillow)

v12.3.0

Compare Source

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

• Remove non-image ImageCms modes #​9697 [@​radarhere]

Documentation

• Add release notes for SBOM and performance improvements #​9747 [@​radarhere]
• Add security release notes #​9741 [@​radarhere]
• Add release notes for Python 3.15 beta wheels #​9696 [@​radarhere]
• ImageFont can also be used with ImageText #​9597 [@​radarhere]
• Additional guidelines for security reports #​9659 [@​wiredfool]
• Fixed typo #​9636 [@​radarhere]
• Added CVEs to 12.2.0 release notes #​9591 [@​radarhere]
• Revise development support information in README #​9583 [@​aclark4life]
• Add INCIDENT_RESPONSE.md #​9555 [@​aclark4life]
• Add STRIDE threat model to security docs #​9562 [@​aclark4life]
• Add CVEs to 12.2.0 release notes #​9556 [@​radarhere]
• Update README with revised security policy #​9553 [@​radarhere]
• Update security policy #​9552 [@​aclark4life]
• Update macOS tested Python versions #​9534 [@​radarhere]

Dependencies

• Update dependency harfbuzz to v14.2.1 #​9720 [@​renovate[bot]]
• Update dependency mypy to v2 #​9653 [@​renovate[bot]]
• Update dependency cibuildwheel to v4 #​9665 [@​renovate[bot]]
• Update github-actions #​9655 [@​renovate[bot]]
• Update dependency libavif to v1.4.2 #​9652 [@​renovate[bot]]
• Update dependency lcms2 to v2.19.1 #​9651 [@​renovate[bot]]
• Update dependency check-jsonschema to v0.37.2 #​9650 [@​renovate[bot]]
• Update google/oss-fuzz digest to d872252 #​9614 [@​renovate[bot]]
• Update dependency lcms2 to v2.19 #​9609 [@​renovate[bot]]
• Update dependency libpng to v1.6.58 - autoclosed #​9608 [@​renovate[bot]]
• Update dependency harfbuzz to v14 #​9610 [@​renovate[bot]]
• Update dependency mypy to v1.20.2 #​9599 [@​renovate[bot]]
• Update github-actions #​9611 [@​renovate[bot]]
• Update dependency cibuildwheel to v3.4.1 #​9607 [@​renovate[bot]]
• Move dependency versions to single JSON and enable Renovate #​9559 [@​hugovk]
• Updated raqm to 0.10.5 #​9557 [@​radarhere]
• Update dependency cibuildwheel to v3.4.0 #​9532 [@​renovate[bot]]

Testing

• Remove matrix.os from benchmark #​9735 [@​radarhere]
• Remove references to libavif patch #​9734 [@​radarhere]
• Add benchmark tests #​9654 [@​akx]
• Use reshape() instead of setting NumPy array shape directly #​9728 [@​radarhere]
• Add dependencies.json to Windows cache key #​9721 [@​radarhere]
• Increase AVIF test epsilon for loong64 #​9714 [@​wszqkzqk]
• Add colour to Linux and Windows wheel build logs #​9677 [@​hugovk]
• Do not test NumPy against Python 3.15 Windows AMD64 wheels #​9674 [@​radarhere]
• Run pyroma in tox -e lint instead of pytest #​9670 [@​hugovk]
• Update Ghostscript to 10.7.1 #​9634 [@​radarhere]
• Update free-threading CI #​9625 [@​hugovk]
• Increase AVIF test epsilon for riscv64 #​9606 [@​radarhere]
• Add Fedora 44 #​9594 [@​radarhere]
• Test Ubuntu 26.04 LTS (Resolute Raccoon) #​9587 [@​hugovk]
• Skip EPS test_1 for Ghostscript 10.06.0 #​9588 [@​radarhere]
• Catch subprocess.CalledProcessError in test_grab_x11 #​9578 [@​radarhere]
• Correct feature name #​9542 [@​radarhere]
• Skip test if FreeType is not available #​9540 [@​radarhere]
• Remove type hint ignore #​9538 [@​radarhere]
• Update macOS tested Python versions #​9534 [@​radarhere]
• Remove Debian 12 and Fedora 42 from CI #​9530 [@​hugovk]
• Remove manylinux2014 and Amazon Linux 2 #​9528 [@​radarhere]

Type hints

• Use NumPy 2.4.6 for mypy #​9705 [@​radarhere]
• Update dependency mypy to v2 #​9653 [@​renovate[bot]]
• Update putpixel type hint to allow lists in xy #​9585 [@​radarhere]
• Remove type hint ignore #​9538 [@​radarhere]

Other changes

• Speed up ImageChops operations #​9738 [@​akx]
• Speed up Image.filter() #​9736 [@​akx]
• Speed up Image.getchannel(), Image.merge(), Image.putalpha() and Image.split() #​9675 [@​akx]
• Speed up Image.fill(), Image.linear_gradient() and Image.radial_gradient(). #​9737 [@​akx]
• Speed up Image.resample() #​9739 [@​akx]
• Speed up alpha_composite, matrix, negative, quantize #​9740 [@​akx]
• Remove PyErr_Clear() of "weird" exceptions #​9730 [@​radarhere]
• Check realloc return value #​9722 [@​radarhere]
• Add max_length to PdfStream decode() #​9718 [@​radarhere]
• Return early when there is no fill region #​9732 [@​radarhere]
• Allow error to be raised if PyDict_SetItemString fails #​9731 [@​radarhere]
• Speed up Image.blend() #​9649 [@​akx]
• Raise OverflowError if number of vertices is too large for Path #​9729 [@​radarhere]
• Remove unused HSV and LAB matrix conversion from C #​9724 [@​radarhere]
• Prevent reusing ImagingDecoderObject.setimage #​9656 [@​Serotav]
• Raise ValueError if FPX tile size is not 64px by 64px #​9660 [@​radarhere]
• Only clear error if it is BufferError #​9727 [@​radarhere]
• Apply XOR mask to 1 and L mode CUR images #​9641 [@​radarhere]
• Do not raise error from unknown channel ID when parsing PSD layers #​9644 [@​radarhere]
• Raise ValueError if P;2L or P;4L data is truncated in frombytes() #​9725 [@​radarhere]
• Embed SBOM into wheels #​9679 [@​hugovk]
• Do not set eval() globals in ImageMath.unsafe_eval() #​9576 [@​radarhere]
• Add Tcl/Tk license to wheels #​9663 [@​radarhere]
• Ensure map stride is at least one full row of pixels #​9719 [@​radarhere]
• Raise OverflowError if text width exceeds INT_MAX #​9717 [@​radarhere]
• Raise error if image modes do not match ImageCms transform modes #​9715 [@​radarhere]
• Use int64_t for text height #​9716 [@​radarhere]
• Return if error occurs in Py_mod_exec slot #​9712 [@​radarhere]
• Add decompression bomb checks to FontFile classes #​9711 [@​radarhere]
• If C error is raised, return NULL #​9706 [@​radarhere]
• Prevent saving 1 mode images as TGA with run-length encoding #​9709 [@​radarhere]
• Raise ValueError if EPS BeginBinary bytecount is negative #​9708 [@​radarhere]
• Do not DECREF tuple until tuple items are no longer used #​9707 [@​radarhere]
• Do not update NumPy automatically #​9713 [@​radarhere]
• Simplified code #​9642 [@​radarhere]
• If realloc fails, do not reduce block size #​9702 [@​radarhere]
• DECREF PyDict_GetItemRef result #​9701 [@​radarhere]
• Use int64_t to calculate paste box dimensions #​9703 [@​radarhere]
• Calculate JPEG2000 total_component_width for each tile in isolation #​9704 [@​radarhere]
• Raise ValueError if value is not bytes for TIFF_BYTE or TIFF_ASCII tag #​9699 [@​radarhere]
• Release Py_Buffer on error #​9698 [@​radarhere]
• Use os.startfile() in WindowsViewer show_file() #​9692 [@​radarhere]
• Validate large filter sizes when initializing RankFilter #​9695 [@​radarhere]
• Add decompression bomb check to GdImageFile #​9693 [@​radarhere]
• Free image bands when an error occurs while splitting an image #​9694 [@​radarhere]
• Check PyList_Append return value #​9690 [@​radarhere]
• Check WebPMuxNew return value #​9689 [@​radarhere]
• Check PyCapsule_New return value #​9691 [@​radarhere]
• Do not return negative width for text length #​9623 [@​radarhere]
• Add args argument to METH_NOARGS methods #​9687 [@​radarhere]
• Check ImagingNewDirty return value #​9688 [@​radarhere]
• Use int64_t for text width #​9686 [@​radarhere]
• Move PyDateTime_IMPORT inside Py_mod_exec slot #​9580 [@​radarhere]
• Validate size and rank when initializing RankFilter #​9661 [@​radarhere]
• Raise ValueError if insufficient data is read from DDS RGB file #​9405 [@​radarhere]
• Correct IFDRational.__float__() return value #​9676 [@​nyxst4ck]
• Correct length when accessing ImagePath.Path subscript #​9685 [@​radarhere]
• Release reference on non-flattened sequence error #​9684 [@​radarhere]
• Do not release Py_buffer until buf is no longer in use #​9683 [@​radarhere]
• Do not resize macOS retina screenshots by default #​9266 [@​radarhere]
• Add abstract BaseImageFont class #​9595 [@​radarhere]
• Cast before multiplying #​9678 [@​radarhere]
• Limit radius to half width or height of rounded rectangle #​9561 [@​radarhere]
• linesize is always xsize multiplied by pixelsize #​9647 [@​radarhere]
• Check annotate_hash_table return value #​9572 [@​radarhere]
• Catch KeyError when checking mode from PNG IHDR chunk #​9604 [@​radarhere]
• Only pass one argument to C expand #​9664 [@​radarhere]
• Raise error if declared JPEG2000 marker length is too small #​9666 [@​radarhere]
• In _dump(), use Python PPM save, instead of C #​9566 [@​radarhere]
• Raise error consistently from inside ImagingNewArrow #​9571 [@​radarhere]
• Simplify RankFilter.c check #​9662 [@​radarhere]
• Support opening and saving L mode AVIF images with libavif >= 1.3.0 #​9471 [@​radarhere]
• [pre-commit.ci] pre-commit autoupdate #​9648 [@​pre-commit-ci[bot]]
• Apply libtiff patch to fix CVE-2026-4775 #​9646 [@​radarhere]
• Remove duplicate code #​9640 [@​radarhere]
• Switch iOS back to macos-26-intel #​9631 [@​radarhere]
• Don't use list as default in PdfParser read_prev_trailer #​9629 [@​danigm]
• Add support for Python 3.15 #​9624 [@​radarhere]
• Do not draw line or arc if width is zero #​9589 [@​radarhere]
• Use _accept check in WebP _open #​9605 [@​radarhere]
• Compare dist sizes vs latest PyPI release #​9621 [@​hugovk]
• Do not generate SBOM in scheduled run on fork #​9620 [@​radarhere]
• Use plugin method directly when saving PDFs #​9547 [@​radarhere]
• [pre-commit.ci] pre-commit autoupdate #​9617 [@​pre-commit-ci[bot]]
• Set Renovate prCreation to not-pending #​9616 [@​radarhere]
• Raise error if PNG transparency has incorrect type or length when saving #​9536 [@​radarhere]
• If PdfParser buffer is memoryview, release it when closing #​9596 [@​radarhere]
• Correct integer overflow in 16-bit resampling #​9480 [@​hayatoikoma]
• SBOM: Use real versions from dependencies.json #​9593 [@​hugovk]
• Restrict SBOM upload to only Pillow JSON #​9598 [@​radarhere]
• Generate CycloneDX SBOM at release time via CI #​9550 [@​aclark4life]
• Raise ValueError if ImageOps border has unsupported format #​9426 [@​veeceey]
• Unsafe pointer dereference from unchecked Python integer in Tk initialization #​9548 [@​barttran2k]
• Reorder renovate.json #​9565 [@​radarhere]
• Add python-pillow GitHub Sponsors to FUNDING.yml #​9563 [@​aclark4life]
• Correct environment URL #​9558 [@​radarhere]
• Remove or protect secrets in Actions #​9544 [@​pre-commit-ci[bot]]
• Move Homebrew dependencies into Brewfile #​9546 [@​hugovk]
• Do not precompute horizontal coefficients if not horizontal resizing #​9543 [@​radarhere]
• Fix comparison warnings #​9541 [@​radarhere]
• Close PdfParser if error occurs during init #​9539 [@​radarhere]
• Drop experimental Python 3.13 free-threaded wheels #​9535 [@​radarhere]
• Update github-actions #​9533 [@​renovate[bot]]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • ""
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [pillow](https://github.com/python-pillow/Pillow) ([changelog](https://github.com/python-pillow/Pillow/releases)) | `==12.2.0` → `==12.3.0` |  |  | --- ### BIT-pillow-2026-54059 / [CVE-2026-54059](https://nvd.nist.gov/vuln/detail/CVE-2026-54059) / [GHSA-8v84-f9pq-wr9x](https://github.com/advisories/GHSA-8v84-f9pq-wr9x) / PYSEC-2026-2253 <details> <summary>More information</summary> #### Details Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0. #### Severity - CVSS Score: 7.5 / 10 (High) - Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H` #### References - [https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst](https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst) - [https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d](https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d) - [https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x](https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x) This data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2253) and the [PyPI Advisory Database](https://github.com/pypa/advisory-database) ([CC-BY 4.0](https://github.com/pypa/advisory-database/blob/main/LICENSE)). </details> --- ### BIT-pillow-2026-54060 / [CVE-2026-54060](https://nvd.nist.gov/vuln/detail/CVE-2026-54060) / [GHSA-5x94-69rx-g8h2](https://github.com/advisories/GHSA-5x94-69rx-g8h2) / PYSEC-2026-2254 <details> <summary>More information</summary> #### Details Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0. #### Severity - CVSS Score: 7.5 / 10 (High) - Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H` #### References - [https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst](https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst) - [https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d](https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d) - [https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2](https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2) This data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2254) and the [PyPI Advisory Database](https://github.com/pypa/advisory-database) ([CC-BY 4.0](https://github.com/pypa/advisory-database/blob/main/LICENSE)). </details> --- ### BIT-pillow-2026-55379 / [CVE-2026-55379](https://nvd.nist.gov/vuln/detail/CVE-2026-55379) / [GHSA-45hq-cxwh-f6vc](https://github.com/advisories/GHSA-45hq-cxwh-f6vc) / PYSEC-2026-2255 <details> <summary>More information</summary> #### Details Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow's documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0. #### Severity - CVSS Score: 7.5 / 10 (High) - Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H` #### References - [https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst](https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst) - [https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d](https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d) - [https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc](https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc) This data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2255) and the [PyPI Advisory Database](https://github.com/pypa/advisory-database) ([CC-BY 4.0](https://github.com/pypa/advisory-database/blob/main/LICENSE)). </details> --- ### BIT-pillow-2026-55380 / [CVE-2026-55380](https://nvd.nist.gov/vuln/detail/CVE-2026-55380) / [GHSA-phj9-mv4w-65pm](https://github.com/advisories/GHSA-phj9-mv4w-65pm) / PYSEC-2026-2256 <details> <summary>More information</summary> #### Details Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0. #### Severity - CVSS Score: 7.5 / 10 (High) - Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H` #### References - [https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst](https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst) - [https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675](https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675) - [https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm](https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm) This data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2256) and the [PyPI Advisory Database](https://github.com/pypa/advisory-database) ([CC-BY 4.0](https://github.com/pypa/advisory-database/blob/main/LICENSE)). </details> --- ### BIT-pillow-2026-55798 / [CVE-2026-55798](https://nvd.nist.gov/vuln/detail/CVE-2026-55798) / [GHSA-4x4j-2g7c-83w6](https://github.com/advisories/GHSA-4x4j-2g7c-83w6) / PYSEC-2026-2257 <details> <summary>More information</summary> #### Details Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result to subprocess.Popen(..., shell=True), allowing shell metacharacters in the file path to inject arbitrary cmd.exe commands. This issue is fixed in version 12.3.0. #### Severity - CVSS Score: 4.5 / 10 (Medium) - Vector String: `CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L` #### References - [https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst](https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst) - [https://github.com/python-pillow/Pillow/commit/8404ea5fe5df40fc34aa1e51403dd6fce0778b8a](https://github.com/python-pillow/Pillow/commit/8404ea5fe5df40fc34aa1e51403dd6fce0778b8a) - [https://github.com/python-pillow/Pillow/commit/88194166691b7b603529b8b036ab3ab9cedd2de4](https://github.com/python-pillow/Pillow/commit/88194166691b7b603529b8b036ab3ab9cedd2de4) - [https://github.com/python-pillow/Pillow/commit/b0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f](https://github.com/python-pillow/Pillow/commit/b0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f) - [https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6](https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6) This data is provided by [OSV](https://osv.dev/vulnerability/PYSEC-2026-2257) and the [PyPI Advisory Database](https://github.com/pypa/advisory-database) ([CC-BY 4.0](https://github.com/pypa/advisory-database/blob/main/LICENSE)). </details> --- ### Release Notes <details> <summary>python-pillow/Pillow (pillow)</summary> ### [`v12.3.0`](https://github.com/python-pillow/Pillow/releases/tag/12.3.0) [Compare Source](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0) <https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html> #### Removals - Remove non-image ImageCms modes [#&#8203;9697](https://github.com/python-pillow/Pillow/issues/9697) \[[@&#8203;radarhere](https://github.com/radarhere)] #### Documentation - Add release notes for SBOM and performance improvements [#&#8203;9747](https://github.com/python-pillow/Pillow/issues/9747) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add security release notes [#&#8203;9741](https://github.com/python-pillow/Pillow/issues/9741) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add release notes for Python 3.15 beta wheels [#&#8203;9696](https://github.com/python-pillow/Pillow/issues/9696) \[[@&#8203;radarhere](https://github.com/radarhere)] - ImageFont can also be used with ImageText [#&#8203;9597](https://github.com/python-pillow/Pillow/issues/9597) \[[@&#8203;radarhere](https://github.com/radarhere)] - Additional guidelines for security reports [#&#8203;9659](https://github.com/python-pillow/Pillow/issues/9659) \[[@&#8203;wiredfool](https://github.com/wiredfool)] - Fixed typo [#&#8203;9636](https://github.com/python-pillow/Pillow/issues/9636) \[[@&#8203;radarhere](https://github.com/radarhere)] - Added CVEs to 12.2.0 release notes [#&#8203;9591](https://github.com/python-pillow/Pillow/issues/9591) \[[@&#8203;radarhere](https://github.com/radarhere)] - Revise development support information in README [#&#8203;9583](https://github.com/python-pillow/Pillow/issues/9583) \[[@&#8203;aclark4life](https://github.com/aclark4life)] - Add INCIDENT\_RESPONSE.md [#&#8203;9555](https://github.com/python-pillow/Pillow/issues/9555) \[[@&#8203;aclark4life](https://github.com/aclark4life)] - Add STRIDE threat model to security docs [#&#8203;9562](https://github.com/python-pillow/Pillow/issues/9562) \[[@&#8203;aclark4life](https://github.com/aclark4life)] - Add CVEs to 12.2.0 release notes [#&#8203;9556](https://github.com/python-pillow/Pillow/issues/9556) \[[@&#8203;radarhere](https://github.com/radarhere)] - Update README with revised security policy [#&#8203;9553](https://github.com/python-pillow/Pillow/issues/9553) \[[@&#8203;radarhere](https://github.com/radarhere)] - Update security policy [#&#8203;9552](https://github.com/python-pillow/Pillow/issues/9552) \[[@&#8203;aclark4life](https://github.com/aclark4life)] - Update macOS tested Python versions [#&#8203;9534](https://github.com/python-pillow/Pillow/issues/9534) \[[@&#8203;radarhere](https://github.com/radarhere)] #### Dependencies - Update dependency harfbuzz to v14.2.1 [#&#8203;9720](https://github.com/python-pillow/Pillow/issues/9720) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency mypy to v2 [#&#8203;9653](https://github.com/python-pillow/Pillow/issues/9653) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency cibuildwheel to v4 [#&#8203;9665](https://github.com/python-pillow/Pillow/issues/9665) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update github-actions [#&#8203;9655](https://github.com/python-pillow/Pillow/issues/9655) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency libavif to v1.4.2 [#&#8203;9652](https://github.com/python-pillow/Pillow/issues/9652) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency lcms2 to v2.19.1 [#&#8203;9651](https://github.com/python-pillow/Pillow/issues/9651) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency check-jsonschema to v0.37.2 [#&#8203;9650](https://github.com/python-pillow/Pillow/issues/9650) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update google/oss-fuzz digest to [`d872252`](https://github.com/python-pillow/Pillow/commit/d872252) [#&#8203;9614](https://github.com/python-pillow/Pillow/issues/9614) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency lcms2 to v2.19 [#&#8203;9609](https://github.com/python-pillow/Pillow/issues/9609) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency libpng to v1.6.58 - autoclosed [#&#8203;9608](https://github.com/python-pillow/Pillow/issues/9608) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency harfbuzz to v14 [#&#8203;9610](https://github.com/python-pillow/Pillow/issues/9610) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency mypy to v1.20.2 [#&#8203;9599](https://github.com/python-pillow/Pillow/issues/9599) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update github-actions [#&#8203;9611](https://github.com/python-pillow/Pillow/issues/9611) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency cibuildwheel to v3.4.1 [#&#8203;9607](https://github.com/python-pillow/Pillow/issues/9607) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Move dependency versions to single JSON and enable Renovate [#&#8203;9559](https://github.com/python-pillow/Pillow/issues/9559) \[[@&#8203;hugovk](https://github.com/hugovk)] - Updated raqm to 0.10.5 [#&#8203;9557](https://github.com/python-pillow/Pillow/issues/9557) \[[@&#8203;radarhere](https://github.com/radarhere)] - Update dependency cibuildwheel to v3.4.0 [#&#8203;9532](https://github.com/python-pillow/Pillow/issues/9532) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] #### Testing - Remove matrix.os from benchmark [#&#8203;9735](https://github.com/python-pillow/Pillow/issues/9735) \[[@&#8203;radarhere](https://github.com/radarhere)] - Remove references to libavif patch [#&#8203;9734](https://github.com/python-pillow/Pillow/issues/9734) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add benchmark tests [#&#8203;9654](https://github.com/python-pillow/Pillow/issues/9654) \[[@&#8203;akx](https://github.com/akx)] - Use reshape() instead of setting NumPy array shape directly [#&#8203;9728](https://github.com/python-pillow/Pillow/issues/9728) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add dependencies.json to Windows cache key [#&#8203;9721](https://github.com/python-pillow/Pillow/issues/9721) \[[@&#8203;radarhere](https://github.com/radarhere)] - Increase AVIF test epsilon for loong64 [#&#8203;9714](https://github.com/python-pillow/Pillow/issues/9714) \[[@&#8203;wszqkzqk](https://github.com/wszqkzqk)] - Add colour to Linux and Windows wheel build logs [#&#8203;9677](https://github.com/python-pillow/Pillow/issues/9677) \[[@&#8203;hugovk](https://github.com/hugovk)] - Do not test NumPy against Python 3.15 Windows AMD64 wheels [#&#8203;9674](https://github.com/python-pillow/Pillow/issues/9674) \[[@&#8203;radarhere](https://github.com/radarhere)] - Run pyroma in `tox -e lint` instead of pytest [#&#8203;9670](https://github.com/python-pillow/Pillow/issues/9670) \[[@&#8203;hugovk](https://github.com/hugovk)] - Update Ghostscript to 10.7.1 [#&#8203;9634](https://github.com/python-pillow/Pillow/issues/9634) \[[@&#8203;radarhere](https://github.com/radarhere)] - Update free-threading CI [#&#8203;9625](https://github.com/python-pillow/Pillow/issues/9625) \[[@&#8203;hugovk](https://github.com/hugovk)] - Increase AVIF test epsilon for riscv64 [#&#8203;9606](https://github.com/python-pillow/Pillow/issues/9606) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add Fedora 44 [#&#8203;9594](https://github.com/python-pillow/Pillow/issues/9594) \[[@&#8203;radarhere](https://github.com/radarhere)] - Test Ubuntu 26.04 LTS (Resolute Raccoon) [#&#8203;9587](https://github.com/python-pillow/Pillow/issues/9587) \[[@&#8203;hugovk](https://github.com/hugovk)] - Skip EPS test\_1 for Ghostscript 10.06.0 [#&#8203;9588](https://github.com/python-pillow/Pillow/issues/9588) \[[@&#8203;radarhere](https://github.com/radarhere)] - Catch subprocess.CalledProcessError in test\_grab\_x11 [#&#8203;9578](https://github.com/python-pillow/Pillow/issues/9578) \[[@&#8203;radarhere](https://github.com/radarhere)] - Correct feature name [#&#8203;9542](https://github.com/python-pillow/Pillow/issues/9542) \[[@&#8203;radarhere](https://github.com/radarhere)] - Skip test if FreeType is not available [#&#8203;9540](https://github.com/python-pillow/Pillow/issues/9540) \[[@&#8203;radarhere](https://github.com/radarhere)] - Remove type hint ignore [#&#8203;9538](https://github.com/python-pillow/Pillow/issues/9538) \[[@&#8203;radarhere](https://github.com/radarhere)] - Update macOS tested Python versions [#&#8203;9534](https://github.com/python-pillow/Pillow/issues/9534) \[[@&#8203;radarhere](https://github.com/radarhere)] - Remove Debian 12 and Fedora 42 from CI [#&#8203;9530](https://github.com/python-pillow/Pillow/issues/9530) \[[@&#8203;hugovk](https://github.com/hugovk)] - Remove manylinux2014 and Amazon Linux 2 [#&#8203;9528](https://github.com/python-pillow/Pillow/issues/9528) \[[@&#8203;radarhere](https://github.com/radarhere)] #### Type hints - Use NumPy 2.4.6 for mypy [#&#8203;9705](https://github.com/python-pillow/Pillow/issues/9705) \[[@&#8203;radarhere](https://github.com/radarhere)] - Update dependency mypy to v2 [#&#8203;9653](https://github.com/python-pillow/Pillow/issues/9653) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] - Update putpixel type hint to allow lists in xy [#&#8203;9585](https://github.com/python-pillow/Pillow/issues/9585) \[[@&#8203;radarhere](https://github.com/radarhere)] - Remove type hint ignore [#&#8203;9538](https://github.com/python-pillow/Pillow/issues/9538) \[[@&#8203;radarhere](https://github.com/radarhere)] #### Other changes - Speed up ImageChops operations [#&#8203;9738](https://github.com/python-pillow/Pillow/issues/9738) \[[@&#8203;akx](https://github.com/akx)] - Speed up `Image.filter()` [#&#8203;9736](https://github.com/python-pillow/Pillow/issues/9736) \[[@&#8203;akx](https://github.com/akx)] - Speed up `Image.getchannel()`, `Image.merge()`, `Image.putalpha()` and `Image.split()` [#&#8203;9675](https://github.com/python-pillow/Pillow/issues/9675) \[[@&#8203;akx](https://github.com/akx)] - Speed up `Image.fill()`, `Image.linear_gradient()` and `Image.radial_gradient()`. [#&#8203;9737](https://github.com/python-pillow/Pillow/issues/9737) \[[@&#8203;akx](https://github.com/akx)] - Speed up `Image.resample()` [#&#8203;9739](https://github.com/python-pillow/Pillow/issues/9739) \[[@&#8203;akx](https://github.com/akx)] - Speed up `alpha_composite`, `matrix`, `negative`, `quantize` [#&#8203;9740](https://github.com/python-pillow/Pillow/issues/9740) \[[@&#8203;akx](https://github.com/akx)] - Remove PyErr\_Clear() of "weird" exceptions [#&#8203;9730](https://github.com/python-pillow/Pillow/issues/9730) \[[@&#8203;radarhere](https://github.com/radarhere)] - Check realloc return value [#&#8203;9722](https://github.com/python-pillow/Pillow/issues/9722) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add max\_length to PdfStream decode() [#&#8203;9718](https://github.com/python-pillow/Pillow/issues/9718) \[[@&#8203;radarhere](https://github.com/radarhere)] - Return early when there is no fill region [#&#8203;9732](https://github.com/python-pillow/Pillow/issues/9732) \[[@&#8203;radarhere](https://github.com/radarhere)] - Allow error to be raised if PyDict\_SetItemString fails [#&#8203;9731](https://github.com/python-pillow/Pillow/issues/9731) \[[@&#8203;radarhere](https://github.com/radarhere)] - Speed up `Image.blend()` [#&#8203;9649](https://github.com/python-pillow/Pillow/issues/9649) \[[@&#8203;akx](https://github.com/akx)] - Raise OverflowError if number of vertices is too large for Path [#&#8203;9729](https://github.com/python-pillow/Pillow/issues/9729) \[[@&#8203;radarhere](https://github.com/radarhere)] - Remove unused HSV and LAB matrix conversion from C [#&#8203;9724](https://github.com/python-pillow/Pillow/issues/9724) \[[@&#8203;radarhere](https://github.com/radarhere)] - Prevent reusing ImagingDecoderObject.setimage [#&#8203;9656](https://github.com/python-pillow/Pillow/issues/9656) \[[@&#8203;Serotav](https://github.com/Serotav)] - Raise ValueError if FPX tile size is not 64px by 64px [#&#8203;9660](https://github.com/python-pillow/Pillow/issues/9660) \[[@&#8203;radarhere](https://github.com/radarhere)] - Only clear error if it is BufferError [#&#8203;9727](https://github.com/python-pillow/Pillow/issues/9727) \[[@&#8203;radarhere](https://github.com/radarhere)] - Apply XOR mask to 1 and L mode CUR images [#&#8203;9641](https://github.com/python-pillow/Pillow/issues/9641) \[[@&#8203;radarhere](https://github.com/radarhere)] - Do not raise error from unknown channel ID when parsing PSD layers [#&#8203;9644](https://github.com/python-pillow/Pillow/issues/9644) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise ValueError if P;2L or P;4L data is truncated in frombytes() [#&#8203;9725](https://github.com/python-pillow/Pillow/issues/9725) \[[@&#8203;radarhere](https://github.com/radarhere)] - Embed SBOM into wheels [#&#8203;9679](https://github.com/python-pillow/Pillow/issues/9679) \[[@&#8203;hugovk](https://github.com/hugovk)] - Do not set eval() globals in ImageMath.unsafe\_eval() [#&#8203;9576](https://github.com/python-pillow/Pillow/issues/9576) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add Tcl/Tk license to wheels [#&#8203;9663](https://github.com/python-pillow/Pillow/issues/9663) \[[@&#8203;radarhere](https://github.com/radarhere)] - Ensure map stride is at least one full row of pixels [#&#8203;9719](https://github.com/python-pillow/Pillow/issues/9719) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise OverflowError if text width exceeds INT\_MAX [#&#8203;9717](https://github.com/python-pillow/Pillow/issues/9717) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise error if image modes do not match ImageCms transform modes [#&#8203;9715](https://github.com/python-pillow/Pillow/issues/9715) \[[@&#8203;radarhere](https://github.com/radarhere)] - Use int64\_t for text height [#&#8203;9716](https://github.com/python-pillow/Pillow/issues/9716) \[[@&#8203;radarhere](https://github.com/radarhere)] - Return if error occurs in Py\_mod\_exec slot [#&#8203;9712](https://github.com/python-pillow/Pillow/issues/9712) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add decompression bomb checks to FontFile classes [#&#8203;9711](https://github.com/python-pillow/Pillow/issues/9711) \[[@&#8203;radarhere](https://github.com/radarhere)] - If C error is raised, return NULL [#&#8203;9706](https://github.com/python-pillow/Pillow/issues/9706) \[[@&#8203;radarhere](https://github.com/radarhere)] - Prevent saving 1 mode images as TGA with run-length encoding [#&#8203;9709](https://github.com/python-pillow/Pillow/issues/9709) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise ValueError if EPS BeginBinary bytecount is negative [#&#8203;9708](https://github.com/python-pillow/Pillow/issues/9708) \[[@&#8203;radarhere](https://github.com/radarhere)] - Do not DECREF tuple until tuple items are no longer used [#&#8203;9707](https://github.com/python-pillow/Pillow/issues/9707) \[[@&#8203;radarhere](https://github.com/radarhere)] - Do not update NumPy automatically [#&#8203;9713](https://github.com/python-pillow/Pillow/issues/9713) \[[@&#8203;radarhere](https://github.com/radarhere)] - Simplified code [#&#8203;9642](https://github.com/python-pillow/Pillow/issues/9642) \[[@&#8203;radarhere](https://github.com/radarhere)] - If realloc fails, do not reduce block size [#&#8203;9702](https://github.com/python-pillow/Pillow/issues/9702) \[[@&#8203;radarhere](https://github.com/radarhere)] - DECREF PyDict\_GetItemRef result [#&#8203;9701](https://github.com/python-pillow/Pillow/issues/9701) \[[@&#8203;radarhere](https://github.com/radarhere)] - Use int64\_t to calculate paste box dimensions [#&#8203;9703](https://github.com/python-pillow/Pillow/issues/9703) \[[@&#8203;radarhere](https://github.com/radarhere)] - Calculate JPEG2000 total\_component\_width for each tile in isolation [#&#8203;9704](https://github.com/python-pillow/Pillow/issues/9704) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise ValueError if value is not bytes for TIFF\_BYTE or TIFF\_ASCII tag [#&#8203;9699](https://github.com/python-pillow/Pillow/issues/9699) \[[@&#8203;radarhere](https://github.com/radarhere)] - Release Py\_Buffer on error [#&#8203;9698](https://github.com/python-pillow/Pillow/issues/9698) \[[@&#8203;radarhere](https://github.com/radarhere)] - Use os.startfile() in WindowsViewer show\_file() [#&#8203;9692](https://github.com/python-pillow/Pillow/issues/9692) \[[@&#8203;radarhere](https://github.com/radarhere)] - Validate large filter sizes when initializing RankFilter [#&#8203;9695](https://github.com/python-pillow/Pillow/issues/9695) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add decompression bomb check to GdImageFile [#&#8203;9693](https://github.com/python-pillow/Pillow/issues/9693) \[[@&#8203;radarhere](https://github.com/radarhere)] - Free image bands when an error occurs while splitting an image [#&#8203;9694](https://github.com/python-pillow/Pillow/issues/9694) \[[@&#8203;radarhere](https://github.com/radarhere)] - Check PyList\_Append return value [#&#8203;9690](https://github.com/python-pillow/Pillow/issues/9690) \[[@&#8203;radarhere](https://github.com/radarhere)] - Check WebPMuxNew return value [#&#8203;9689](https://github.com/python-pillow/Pillow/issues/9689) \[[@&#8203;radarhere](https://github.com/radarhere)] - Check PyCapsule\_New return value [#&#8203;9691](https://github.com/python-pillow/Pillow/issues/9691) \[[@&#8203;radarhere](https://github.com/radarhere)] - Do not return negative width for text length [#&#8203;9623](https://github.com/python-pillow/Pillow/issues/9623) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add args argument to METH\_NOARGS methods [#&#8203;9687](https://github.com/python-pillow/Pillow/issues/9687) \[[@&#8203;radarhere](https://github.com/radarhere)] - Check ImagingNewDirty return value [#&#8203;9688](https://github.com/python-pillow/Pillow/issues/9688) \[[@&#8203;radarhere](https://github.com/radarhere)] - Use int64\_t for text width [#&#8203;9686](https://github.com/python-pillow/Pillow/issues/9686) \[[@&#8203;radarhere](https://github.com/radarhere)] - Move PyDateTime\_IMPORT inside Py\_mod\_exec slot [#&#8203;9580](https://github.com/python-pillow/Pillow/issues/9580) \[[@&#8203;radarhere](https://github.com/radarhere)] - Validate size and rank when initializing RankFilter [#&#8203;9661](https://github.com/python-pillow/Pillow/issues/9661) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise ValueError if insufficient data is read from DDS RGB file [#&#8203;9405](https://github.com/python-pillow/Pillow/issues/9405) \[[@&#8203;radarhere](https://github.com/radarhere)] - Correct `IFDRational.__float__()` return value [#&#8203;9676](https://github.com/python-pillow/Pillow/issues/9676) \[[@&#8203;nyxst4ck](https://github.com/nyxst4ck)] - Correct length when accessing ImagePath.Path subscript [#&#8203;9685](https://github.com/python-pillow/Pillow/issues/9685) \[[@&#8203;radarhere](https://github.com/radarhere)] - Release reference on non-flattened sequence error [#&#8203;9684](https://github.com/python-pillow/Pillow/issues/9684) \[[@&#8203;radarhere](https://github.com/radarhere)] - Do not release Py\_buffer until buf is no longer in use [#&#8203;9683](https://github.com/python-pillow/Pillow/issues/9683) \[[@&#8203;radarhere](https://github.com/radarhere)] - Do not resize macOS retina screenshots by default [#&#8203;9266](https://github.com/python-pillow/Pillow/issues/9266) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add abstract BaseImageFont class [#&#8203;9595](https://github.com/python-pillow/Pillow/issues/9595) \[[@&#8203;radarhere](https://github.com/radarhere)] - Cast before multiplying [#&#8203;9678](https://github.com/python-pillow/Pillow/issues/9678) \[[@&#8203;radarhere](https://github.com/radarhere)] - Limit radius to half width or height of rounded rectangle [#&#8203;9561](https://github.com/python-pillow/Pillow/issues/9561) \[[@&#8203;radarhere](https://github.com/radarhere)] - linesize is always xsize multiplied by pixelsize [#&#8203;9647](https://github.com/python-pillow/Pillow/issues/9647) \[[@&#8203;radarhere](https://github.com/radarhere)] - Check annotate\_hash\_table return value [#&#8203;9572](https://github.com/python-pillow/Pillow/issues/9572) \[[@&#8203;radarhere](https://github.com/radarhere)] - Catch KeyError when checking mode from PNG IHDR chunk [#&#8203;9604](https://github.com/python-pillow/Pillow/issues/9604) \[[@&#8203;radarhere](https://github.com/radarhere)] - Only pass one argument to C expand [#&#8203;9664](https://github.com/python-pillow/Pillow/issues/9664) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise error if declared JPEG2000 marker length is too small [#&#8203;9666](https://github.com/python-pillow/Pillow/issues/9666) \[[@&#8203;radarhere](https://github.com/radarhere)] - In \_dump(), use Python PPM save, instead of C [#&#8203;9566](https://github.com/python-pillow/Pillow/issues/9566) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise error consistently from inside ImagingNewArrow [#&#8203;9571](https://github.com/python-pillow/Pillow/issues/9571) \[[@&#8203;radarhere](https://github.com/radarhere)] - Simplify `RankFilter.c` check [#&#8203;9662](https://github.com/python-pillow/Pillow/issues/9662) \[[@&#8203;radarhere](https://github.com/radarhere)] - Support opening and saving L mode AVIF images with libavif >= 1.3.0 [#&#8203;9471](https://github.com/python-pillow/Pillow/issues/9471) \[[@&#8203;radarhere](https://github.com/radarhere)] - \[pre-commit.ci] pre-commit autoupdate [#&#8203;9648](https://github.com/python-pillow/Pillow/issues/9648) \[@&#8203;[pre-commit-ci\[bot\]](https://github.com/apps/pre-commit-ci)] - Apply libtiff patch to fix CVE-2026-4775 [#&#8203;9646](https://github.com/python-pillow/Pillow/issues/9646) \[[@&#8203;radarhere](https://github.com/radarhere)] - Remove duplicate code [#&#8203;9640](https://github.com/python-pillow/Pillow/issues/9640) \[[@&#8203;radarhere](https://github.com/radarhere)] - Switch iOS back to macos-26-intel [#&#8203;9631](https://github.com/python-pillow/Pillow/issues/9631) \[[@&#8203;radarhere](https://github.com/radarhere)] - Don't use list as default in PdfParser read\_prev\_trailer [#&#8203;9629](https://github.com/python-pillow/Pillow/issues/9629) \[[@&#8203;danigm](https://github.com/danigm)] - Add support for Python 3.15 [#&#8203;9624](https://github.com/python-pillow/Pillow/issues/9624) \[[@&#8203;radarhere](https://github.com/radarhere)] - Do not draw line or arc if width is zero [#&#8203;9589](https://github.com/python-pillow/Pillow/issues/9589) \[[@&#8203;radarhere](https://github.com/radarhere)] - Use \_accept check in WebP \_open [#&#8203;9605](https://github.com/python-pillow/Pillow/issues/9605) \[[@&#8203;radarhere](https://github.com/radarhere)] - Compare dist sizes vs latest PyPI release [#&#8203;9621](https://github.com/python-pillow/Pillow/issues/9621) \[[@&#8203;hugovk](https://github.com/hugovk)] - Do not generate SBOM in scheduled run on fork [#&#8203;9620](https://github.com/python-pillow/Pillow/issues/9620) \[[@&#8203;radarhere](https://github.com/radarhere)] - Use plugin method directly when saving PDFs [#&#8203;9547](https://github.com/python-pillow/Pillow/issues/9547) \[[@&#8203;radarhere](https://github.com/radarhere)] - \[pre-commit.ci] pre-commit autoupdate [#&#8203;9617](https://github.com/python-pillow/Pillow/issues/9617) \[@&#8203;[pre-commit-ci\[bot\]](https://github.com/apps/pre-commit-ci)] - Set Renovate prCreation to not-pending [#&#8203;9616](https://github.com/python-pillow/Pillow/issues/9616) \[[@&#8203;radarhere](https://github.com/radarhere)] - Raise error if PNG transparency has incorrect type or length when saving [#&#8203;9536](https://github.com/python-pillow/Pillow/issues/9536) \[[@&#8203;radarhere](https://github.com/radarhere)] - If PdfParser buffer is memoryview, release it when closing [#&#8203;9596](https://github.com/python-pillow/Pillow/issues/9596) \[[@&#8203;radarhere](https://github.com/radarhere)] - Correct integer overflow in 16-bit resampling [#&#8203;9480](https://github.com/python-pillow/Pillow/issues/9480) \[[@&#8203;hayatoikoma](https://github.com/hayatoikoma)] - SBOM: Use real versions from dependencies.json [#&#8203;9593](https://github.com/python-pillow/Pillow/issues/9593) \[[@&#8203;hugovk](https://github.com/hugovk)] - Restrict SBOM upload to only Pillow JSON [#&#8203;9598](https://github.com/python-pillow/Pillow/issues/9598) \[[@&#8203;radarhere](https://github.com/radarhere)] - Generate CycloneDX SBOM at release time via CI [#&#8203;9550](https://github.com/python-pillow/Pillow/issues/9550) \[[@&#8203;aclark4life](https://github.com/aclark4life)] - Raise ValueError if ImageOps border has unsupported format [#&#8203;9426](https://github.com/python-pillow/Pillow/issues/9426) \[[@&#8203;veeceey](https://github.com/veeceey)] - Unsafe pointer dereference from unchecked Python integer in Tk initialization [#&#8203;9548](https://github.com/python-pillow/Pillow/issues/9548) \[[@&#8203;barttran2k](https://github.com/barttran2k)] - Reorder renovate.json [#&#8203;9565](https://github.com/python-pillow/Pillow/issues/9565) \[[@&#8203;radarhere](https://github.com/radarhere)] - Add python-pillow GitHub Sponsors to FUNDING.yml [#&#8203;9563](https://github.com/python-pillow/Pillow/issues/9563) \[[@&#8203;aclark4life](https://github.com/aclark4life)] - Correct environment URL [#&#8203;9558](https://github.com/python-pillow/Pillow/issues/9558) \[[@&#8203;radarhere](https://github.com/radarhere)] - Remove or protect secrets in Actions [#&#8203;9544](https://github.com/python-pillow/Pillow/issues/9544) \[@&#8203;[pre-commit-ci\[bot\]](https://github.com/apps/pre-commit-ci)] - Move Homebrew dependencies into Brewfile [#&#8203;9546](https://github.com/python-pillow/Pillow/issues/9546) \[[@&#8203;hugovk](https://github.com/hugovk)] - Do not precompute horizontal coefficients if not horizontal resizing [#&#8203;9543](https://github.com/python-pillow/Pillow/issues/9543) \[[@&#8203;radarhere](https://github.com/radarhere)] - Fix comparison warnings [#&#8203;9541](https://github.com/python-pillow/Pillow/issues/9541) \[[@&#8203;radarhere](https://github.com/radarhere)] - Close PdfParser if error occurs during init [#&#8203;9539](https://github.com/python-pillow/Pillow/issues/9539) \[[@&#8203;radarhere](https://github.com/radarhere)] - Drop experimental Python 3.13 free-threaded wheels [#&#8203;9535](https://github.com/python-pillow/Pillow/issues/9535) \[[@&#8203;radarhere](https://github.com/radarhere)] - Update github-actions [#&#8203;9533](https://github.com/python-pillow/Pillow/issues/9533) \[@&#8203;[renovate\[bot\]](https://github.com/apps/renovate)] </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjguNSIsInVwZGF0ZWRJblZlciI6IjQzLjE2OC41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

renovate-bot added the

dependencies

label 2026-07-13 11:33:47 +02:00

renovate-bot added 1 commit 2026-07-13 11:33:48 +02:00

chore(deps): update dependency pillow to v12.3.0 [security] f56f02fe22

renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-07-13 11:33:54 +02:00

alpha-nerd merged commit 7f4d59b395 into main 2026-07-14 13:58:42 +02:00

alpha-nerd referenced this pull request from a commit 2026-07-14 13:58:44 +02:00

Merge pull request 'chore(deps): update dependency pillow to v12.3.0 [security]' (#142) from renovate/pypi-pillow-vulnerability into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

Something is not working

  

dependencies

dependency management

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

question

More information is needed

  

renovate: stop-updating

stop renovate-bot pushing

  

wontfix

This won't be fixed

  

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

question

More information is needed

  

renovate: stop-updating

cmd renovate to stop updating the pr

  

security

CVE warning

  

wontfix

This won't be fixed

No labels

bug

dependencies

duplicate

enhancement

help wanted

invalid

question

renovate: stop-updating

wontfix

bug

duplicate

enhancement

help wanted

invalid

question

renovate: stop-updating

security

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: nomyo-ai/nomyo-router#142

No description provided.