{"url":"https://pypi.sbomify.com/package/pillow/12.1.0","markdown_url":"https://pypi.sbomify.com/package/pillow/12.1.0.md","name":"pillow","version":"12.1.0","purl":"pkg:pypi/pillow@12.1.0","summary":"Python Imaging Library (fork)","author":null,"project_urls":{"Changelog":"https://github.com/python-pillow/Pillow/releases","Documentation":"https://pillow.readthedocs.io","Funding":"https://tidelift.com/subscription/pkg/pypi-pillow?utm_source=pypi-pillow&utm_medium=pypi","Homepage":"https://python-pillow.github.io","Mastodon":"https://fosstodon.org/@pillow","Release notes":"https://pillow.readthedocs.io/en/stable/releasenotes/index.html","Source":"https://github.com/python-pillow/Pillow"},"requires_python":">=3.10","license":null,"classifiers":["Development Status :: 6 - Mature","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Topic :: Multimedia :: Graphics","Topic :: Multimedia :: Graphics :: Capture :: Digital Camera","Topic :: Multimedia :: Graphics :: Capture :: Screen Capture","Topic :: Multimedia :: Graphics :: Graphics Conversion","Topic :: Multimedia :: Graphics :: Viewers","Typing :: Typed"],"wheels":[{"filename":"pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/e9/d2/b28221abaa7b4c40b7dba948f0f6a708bd7342c4d47ce342f0ea39643974/pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"ee4e078a-0343-5ecc-9322-b67f36f9655c","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ee4e078a-0343-5ecc-9322-b67f36f9655c/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/71/b8/7a61fb234df6a9b0b479f69e66901209d89ff72a435b49933f9122f94cac/pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"bbeeaa80-f36d-540e-8f74-ac79ae96273c","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bbeeaa80-f36d-540e-8f74-ac79ae96273c/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/ea/51/55c751a57cc524a15a0e3db20e5cde517582359508d62305a627e77fd295/pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"fa0d838a-9d0a-5c41-ba38-e03c21b1e8f2","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fa0d838a-9d0a-5c41-ba38-e03c21b1e8f2/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/dc/7c/60e3e6f5e5891a1a06b4c910f742ac862377a6fe842f7184df4a274ce7bf/pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"23cdef38-8099-57c0-809b-1f6b21440d4a","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/23cdef38-8099-57c0-809b-1f6b21440d4a/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/06/37/49d47266ba50b00c27ba63a7c898f1bb41a29627ced8c09e25f19ebec0ff/pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"be867d9b-65c0-5ac1-a865-67e3b1784122","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/be867d9b-65c0-5ac1-a865-67e3b1784122/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/f9/e5/67fd87d2913902462cd9b79c6211c25bfe95fcf5783d06e1367d6d9a741f/pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"aa2250ff-351e-5703-b2ef-ed04d9ebcabb","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/aa2250ff-351e-5703-b2ef-ed04d9ebcabb/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/72/64/f9189e44474610daf83da31145fa56710b627b5c4c0b9c235e34058f6b31/pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"53ede5eb-fb1e-56eb-9d6a-7790f8abcba4","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/53ede5eb-fb1e-56eb-9d6a-7790f8abcba4/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/ef/30/0df458009be6a4caca4ca2c52975e6275c387d4e5c95544e34138b41dc86/pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"546c65e1-9541-5614-88d5-a08b2824b85a","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/546c65e1-9541-5614-88d5-a08b2824b85a/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/e4/86/95845d4eda4f4f9557e25381d70876aa213560243ac1a6d619c46caaedd9/pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"58ad8fd8-7b61-5ca7-8781-0aad045eb871","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/58ad8fd8-7b61-5ca7-8781-0aad045eb871/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/5c/1f/8e66ab9be3aaf1435bc03edd1ebdf58ffcd17f7349c1d970cafe87af27d9/pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"994a8d0a-924e-5ac4-afa4-63f2e64d6fc7","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/994a8d0a-924e-5ac4-afa4-63f2e64d6fc7/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/f9/f6/683b83cb9b1db1fb52b87951b1c0b99bdcfceaa75febf11406c19f82cb5e/pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"13f203ef-b5fd-51a5-a94b-e4408b5d5b0f","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/13f203ef-b5fd-51a5-a94b-e4408b5d5b0f/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/9a/7d/de833d63622538c1d58ce5395e7c6cb7e7dce80decdd8bde4a484e095d9f/pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"d2e4c614-cd5f-502c-b1bd-df5c65737fc8","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d2e4c614-cd5f-502c-b1bd-df5c65737fc8/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/ad/26/7b82c0ab7ef40ebede7a97c72d473bda5950f609f8e0c77b04af574a0ddb/pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"5766274a-87cc-5abf-a0f2-a16e32348314","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5766274a-87cc-5abf-a0f2-a16e32348314/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/76/25/27abc9792615b5e886ca9411ba6637b675f1b77af3104710ac7353fe5605/pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"f085dd75-aad6-5b93-8c12-b52d427796be","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f085dd75-aad6-5b93-8c12-b52d427796be/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/0a/ea/f200a4c36d836100e7bc738fc48cd963d3ba6372ebc8298a889e0cfc3359/pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"f850fceb-40e8-5278-bd10-30739f59235c","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f850fceb-40e8-5278-bd10-30739f59235c/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/11/8f/48d0b77ab2200374c66d344459b8958c86693be99526450e7aee714e03e4/pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"09ecd097-72f5-5e3e-824b-02afca778361","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/09ecd097-72f5-5e3e-824b-02afca778361/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/1d/23/c281182eb986b5d31f0a76d2a2c8cd41722d6fb8ed07521e802f9bba52de/pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"34a2e547-a18d-5d19-bac0-eba59495746c","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/34a2e547-a18d-5d19-bac0-eba59495746c/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/25/ef/7018273e0faac099d7b00982abdcc39142ae6f3bd9ceb06de09779c4a9d6/pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"2bdbd1e0-954e-5129-8b77-82ff81bd93d1","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2bdbd1e0-954e-5129-8b77-82ff81bd93d1/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/1d/fd/f5a0896839762885b3376ff04878f86ab2b097c2f9a9cdccf4eda8ba8dc0/pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"6bdd2080-f37d-5fd4-9d02-172883181def","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6bdd2080-f37d-5fd4-9d02-172883181def/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/98/aa/938a09d127ac1e70e6ed467bd03834350b33ef646b31edb7452d5de43792/pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"37e6e0e5-a926-54a7-8e23-3e502ee6d23f","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/37e6e0e5-a926-54a7-8e23-3e502ee6d23f/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/17/e8/538b24cb426ac0186e03f80f78bc8dc7246c667f58b540bdd57c71c9f79d/pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"6fccd8ff-f005-5135-9fa0-648859e6c35e","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6fccd8ff-f005-5135-9fa0-648859e6c35e/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/01/9a/632e58ec89a32738cabfd9ec418f0e9898a2b4719afc581f07c04a05e3c9/pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"2b27085a-57c0-5f3b-930a-f3706164de77","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2b27085a-57c0-5f3b-930a-f3706164de77/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/c7/a2/d40308cf86eada842ca1f3ffa45d0ca0df7e4ab33c83f81e73f5eaed136d/pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"be606c4f-41a9-5871-9c7e-e1fed0b570a2","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/be606c4f-41a9-5871-9c7e-e1fed0b570a2/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/f1/88/f5b058ad6453a085c5266660a1417bdad590199da1b32fb4efcff9d33b05/pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"6fe32412-bdb8-58d4-8ce6-dbee68b9ce02","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6fe32412-bdb8-58d4-8ce6-dbee68b9ce02/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/2b/c0/5273a99478956a099d533c4f46cbaa19fd69d606624f4334b85e50987a08/pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"f580a3a4-69e5-5532-9477-97a99f3e4c6b","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f580a3a4-69e5-5532-9477-97a99f3e4c6b/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/b4/26/0bf714bc2e73d5267887d47931d53c4ceeceea6978148ed2ab2a4e6463c4/pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"f3e8c785-5ebf-5725-aff5-fecf82f02f70","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f3e8c785-5ebf-5725-aff5-fecf82f02f70/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/43/cf/1ea826200de111a9d65724c54f927f3111dc5ae297f294b370a670c17786/pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"bdf49ade-746b-5eac-8385-53e2ea184b3f","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bdf49ade-746b-5eac-8385-53e2ea184b3f/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/03/e0/7938dd2b2013373fd85d96e0f38d62b7a5a262af21ac274250c7ca7847c9/pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"9a8944f9-a706-5935-9da6-b98c12259004","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9a8944f9-a706-5935-9da6-b98c12259004/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/86/ad/a2aa97d37272a929a98437a8c0ac37b3cf012f4f8721e1bd5154699b2518/pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"2307f671-d524-5168-af26-1b1066e13825","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2307f671-d524-5168-af26-1b1066e13825/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/a4/44/80e46611b288d51b115826f136fb3465653c28f491068a72d3da49b54cd4/pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"cc84c62c-aeba-5dc5-82ff-a90c4dd321f9","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cc84c62c-aeba-5dc5-82ff-a90c4dd321f9/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/6c/6b/c5742cea0f1ade0cd61485dc3d81f05261fc2276f537fbdc00802de56779/pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"bf20e643-c484-5a33-80ad-230af5c10ff1","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bf20e643-c484-5a33-80ad-230af5c10ff1/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/bf/8f/9f521268ce22d63991601aafd3d48d5ff7280a246a1ef62d626d67b44064/pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"59c87c8d-7c48-5401-b770-dee7ab38f261","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/59c87c8d-7c48-5401-b770-dee7ab38f261/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/1a/eb/257f38542893f021502a1bbe0c2e883c90b5cff26cc33b1584a841a06d30/pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"6adbaa34-7992-5873-9b27-c4031d11c024","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6adbaa34-7992-5873-9b27-c4031d11c024/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/c4/5a/8ba375025701c09b309e8d5163c5a4ce0102fa86bbf8800eb0d7ac87bc51/pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"dc462f90-84de-5089-a0e2-4a315cf867b4","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/dc462f90-84de-5089-a0e2-4a315cf867b4/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/cf/dc/cf5e4cdb3db533f539e88a7bbf9f190c64ab8a08a9bc7a4ccf55067872e4/pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"0dabc863-62fc-5730-b3bc-d78ce4ce95c6","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0dabc863-62fc-5730-b3bc-d78ce4ce95c6/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/d0/47/0291a25ac9550677e22eda48510cfc4fa4b2ef0396448b7fbdc0a6946309/pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"44663735-4c41-5212-b2af-be9197f1c105","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/44663735-4c41-5212-b2af-be9197f1c105/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/5e/e1/53ee5163f794aef1bf84243f755ee6897a92c708505350dd1923f4afec48/pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"82cd6e36-93f3-5c7f-bf46-dcfdfa4b847d","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/82cd6e36-93f3-5c7f-bf46-dcfdfa4b847d/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/bc/0b/b4b4106ff0ee1afa1dc599fde6ab230417f800279745124f6c50bcffed8e/pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"4404fae4-c4aa-5e47-b224-2d3c6f9f22ea","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4404fae4-c4aa-5e47-b224-2d3c6f9f22ea/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/19/9f/80b411cbac4a732439e629a26ad3ef11907a8c7fc5377b7602f04f6fe4e7/pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"ea1d4f4d-1d74-5d83-8c50-42524f6c2d00","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ea1d4f4d-1d74-5d83-8c50-42524f6c2d00/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/8f/b7/d65c45db463b66ecb6abc17c6ba6917a911202a07662247e1355ce1789e7/pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"56c95a98-5638-502b-833a-49959e7e57c0","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/56c95a98-5638-502b-833a-49959e7e57c0/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/50/96/dfd4cd726b4a45ae6e3c669fc9e49deb2241312605d33aba50499e9d9bd1/pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"d3130d2c-7153-533e-ab90-7b999e17a86d","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d3130d2c-7153-533e-ab90-7b999e17a86d/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/4d/1c/b5dc52cf713ae46033359c5ca920444f18a6359ce1020dd3e9c553ea5bc6/pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"c72ee50b-17bc-5c52-87b6-f4e7133f1fb9","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c72ee50b-17bc-5c52-87b6-f4e7133f1fb9/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/73/48/fac807ce82e5955bcc2718642b94b1bd22a82a6d452aea31cbb678cddf12/pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"f15cd0a8-f1cb-5680-9f28-e854ee7b9801","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f15cd0a8-f1cb-5680-9f28-e854ee7b9801/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/d2/95/3e0742fe358c4664aed4fd05d5f5373dcdad0b27af52aa0972568541e3f4/pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"2994a44c-d554-5fd9-8655-ee0d9797cc7d","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2994a44c-d554-5fd9-8655-ee0d9797cc7d/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/5a/74/fe2ac378e4e202e56d50540d92e1ef4ff34ed687f3c60f6a121bcf99437e/pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"58295a43-e06e-5365-a939-a167950ad607","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/58295a43-e06e-5365-a939-a167950ad607/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/f3/77/2a60dee1adee4e2655ac328dd05c02a955c1cd683b9f1b82ec3feb44727c/pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"937d940a-5c4e-567f-9f8d-83b434135599","path":"pillow-12.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/937d940a-5c4e-567f-9f8d-83b434135599/download","vulnerability_count":60,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"python-pillow/Pillow","workflow":"wheels.yml","environment":"release-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.10":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/python-pillow/Pillow","1.3.6.1.4.1.57264.1.13":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.14":"refs/tags/12.1.0","1.3.6.1.4.1.57264.1.15":"5171600","1.3.6.1.4.1.57264.1.16":"https://github.com/python-pillow","1.3.6.1.4.1.57264.1.17":"2036701","1.3.6.1.4.1.57264.1.18":"https://github.com/python-pillow/Pillow/.github/workflows/wheels.yml@refs/tags/12.1.0","1.3.6.1.4.1.57264.1.19":"46f45f674d47b5d8bc54230dda8fe9e214598b87","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/python-pillow/Pillow/actions/runs/20653469557/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":46,"has_attestation":true,"vulnerabilities":[{"id":"CVE-2026-112398","aliases":["BIT-pillow-2026-112398","GHSA-5x8w-8jj5-q52h","PYSEC-2026-4330"],"summary":"Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution","severity":"critical","score":9.8,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112398/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112403","aliases":["BIT-pillow-2026-112403","GHSA-8g5g-8vmr-9782","PYSEC-2026-4332"],"summary":"Pillow: Heap buffer overflow in ImagingJpegDecode","severity":"critical","score":9.8,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112403/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96639","aliases":["BIT-pillow-2026-96639","GHSA-v9pv-5gc8-w2m6","PYSEC-2026-4339"],"summary":"Pillow multi-frame loaders can reuse stale native image storage after mode transitions","severity":"critical","score":9.8,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96639/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112393","aliases":["BIT-pillow-2026-112393","GHSA-332p-7hrc-92wf"],"summary":"Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO","severity":"critical","score":9.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112393/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112900","aliases":["BIT-pillow-2026-112900","GHSA-w889-685w-c8fh"],"summary":"Pillow: Argument Injection in Ghostscript call, potentially leading into RCE","severity":"critical","score":9.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112900/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112404","aliases":["BIT-pillow-2026-112404","GHSA-c6hw-5grf-ff96"],"summary":"Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels","severity":"high","score":8.8,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112404/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112896","aliases":["BIT-pillow-2026-112896","GHSA-pchr-8j38-3x4p","PYSEC-2026-4334"],"summary":"Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read","severity":"high","score":8.8,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112896/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112902","aliases":["GHSA-xvh5-g6gv-559v"],"summary":" Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags","severity":"high","score":8.8,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112902/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112397","aliases":["BIT-pillow-2026-112397","GHSA-58r4-6rv3-gfh8","PYSEC-2026-4329"],"summary":"Pillow: Out-of-bounds access in _imagingmorph on a zero-width image","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112397/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112399","aliases":["BIT-pillow-2026-112399","GHSA-5xm2-6676-qcp9"],"summary":"Pillow: APNG background disposal allocates full canvas before decompression bomb check","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112399/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112400","aliases":["BIT-pillow-2026-112400","GHSA-65qm-jvmh-6pqg"],"summary":"Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112400/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112402","aliases":["BIT-pillow-2026-112402","GHSA-7mwm-ghpf-9vrm","PYSEC-2026-4331"],"summary":"Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112402/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112405","aliases":["BIT-pillow-2026-112405","GHSA-cp9v-662q-vvx9","PYSEC-2026-4333"],"summary":"Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112405/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112406","aliases":["BIT-pillow-2026-112406","GHSA-f2g6-542v-9j58"],"summary":"Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112406/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112892","aliases":["BIT-pillow-2026-112892","GHSA-gg2r-wvfm-q9rx"],"summary":"Pillow: MSP RLE decoder expands a tiny file into unbounded memory","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112892/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112894","aliases":["BIT-pillow-2026-112894","GHSA-jg86-v3jv-hrpm"],"summary":"Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112894/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112895","aliases":["BIT-pillow-2026-112895","GHSA-p4wg-p73j-c528"],"summary":"Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112895/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112897","aliases":["BIT-pillow-2026-112897","GHSA-q45j-58j2-45rg"],"summary":"Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112897/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-40192","aliases":["BIT-pillow-2026-40192","GHSA-whj4-6x5x-4v2j","PYSEC-2026-2250"],"summary":"FITS GZIP decompression bomb in Pillow","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.2.0"],"url":"https://insights.sbomify.com/CVE-2026-40192/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-59204","aliases":["BIT-pillow-2026-59204","GHSA-vjc4-5qp5-m44j","PYSEC-2026-3496"],"summary":"Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service","severity":"high","score":8.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-59204/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-25990","aliases":["BIT-pillow-2026-25990","GHSA-cfh3-3jmp-rvhc","PYSEC-2026-2249"],"summary":"Pillow affected by out-of-bounds write when loading PSD images","severity":"high","score":8.6,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.1.1"],"url":"https://insights.sbomify.com/CVE-2026-25990/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-42311","aliases":["BIT-pillow-2026-42311","GHSA-pwv6-vv43-88gr","PYSEC-2026-2252"],"summary":"Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)","severity":"high","score":8.6,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.2.0"],"url":"https://insights.sbomify.com/CVE-2026-42311/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-54058","aliases":["BIT-pillow-2026-54058","GHSA-62p4-gmf7-7g93","PYSEC-2026-3493"],"summary":"Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)","severity":"high","score":8.3,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-54058/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112390","aliases":["BIT-pillow-2026-112390","GHSA-22hg-r758-rrw9"],"summary":"Pillow: Infinite loop in MIC n_frames when the embedded TIFF","severity":"high","score":8.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112390/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112392","aliases":["BIT-pillow-2026-112392","GHSA-27h8-gf7j-v5hc","PYSEC-2026-4326"],"summary":"Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images","severity":"high","score":8.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112392/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112394","aliases":["BIT-pillow-2026-112394","GHSA-4558-3h8r-v8xp","PYSEC-2026-4327"],"summary":"Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size","severity":"high","score":8.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112394/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112893","aliases":["BIT-pillow-2026-112893","GHSA-j4m9-6w36-pw47"],"summary":"Pillow: Invalid free in FreeType glyph rendering when a stroker is active","severity":"high","score":8.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112893/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-59197","aliases":["BIT-pillow-2026-59197","GHSA-xj96-63gp-2gmr","PYSEC-2026-3454"],"summary":"Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`","severity":"high","score":8.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-59197/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96640","aliases":["BIT-pillow-2026-96640","GHSA-mrfp-p49p-3hf2"],"summary":"Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion","severity":"high","score":8.2,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96640/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96644","aliases":["BIT-pillow-2026-96644","GHSA-9v9v-9qvf-h2hj","PYSEC-2026-4343"],"summary":"Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)","severity":"high","score":8.1,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96644/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"GHSA-78g4-xqwv-q3g8","aliases":[],"summary":"Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()","severity":"high","score":8.1,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://osv.dev/vulnerability/GHSA-78g4-xqwv-q3g8","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96778","aliases":["BIT-pillow-2026-96778","GHSA-g7cr-3p24-7wf7"],"summary":"Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer","severity":"high","score":7.7,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96778/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112396","aliases":["BIT-pillow-2026-112396","GHSA-4rr5-89j8-mwwm","PYSEC-2026-4328"],"summary":"Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112396/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112901","aliases":["BIT-pillow-2026-112901","GHSA-xgh8-jp6q-p5x8","PYSEC-2026-4335"],"summary":"Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112901/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-54059","aliases":["BIT-pillow-2026-54059","GHSA-8v84-f9pq-wr9x","PYSEC-2026-2253"],"summary":"Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-54059/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-54060","aliases":["BIT-pillow-2026-54060","GHSA-5x94-69rx-g8h2","PYSEC-2026-2254"],"summary":"Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-54060/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-55379","aliases":["BIT-pillow-2026-55379","GHSA-45hq-cxwh-f6vc","PYSEC-2026-2255"],"summary":"Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-55379/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-55380","aliases":["BIT-pillow-2026-55380","GHSA-phj9-mv4w-65pm","PYSEC-2026-2256"],"summary":"Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-55380/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-59199","aliases":["BIT-pillow-2026-59199","GHSA-6r8x-57c9-28j4","PYSEC-2026-3451"],"summary":"Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-59199/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-59200","aliases":["BIT-pillow-2026-59200","GHSA-jjj6-mw9f-p565","PYSEC-2026-3495"],"summary":"Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-59200/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-59203","aliases":["BIT-pillow-2026-59203","GHSA-pg7v-jwj7-p798","PYSEC-2026-3452"],"summary":"Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-59203/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-59205","aliases":["BIT-pillow-2026-59205","GHSA-9hw9-ch79-4vh6","PYSEC-2026-3453"],"summary":"Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch","severity":"high","score":7.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-59205/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96637","aliases":["BIT-pillow-2026-96637","GHSA-g842-9rc4-69pw","PYSEC-2026-4338"],"summary":"Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS","severity":"high","score":7.1,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96637/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96642","aliases":["BIT-pillow-2026-96642","GHSA-3j72-p6qg-6xp7","PYSEC-2026-4341"],"summary":"Pillow: TarIO negative size field causes infinite CPU-spin loop","severity":"high","score":7.1,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96642/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96643","aliases":["BIT-pillow-2026-96643","GHSA-g4qv-2jxx-769h","PYSEC-2026-4342"],"summary":"Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time","severity":"high","score":7.1,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96643/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112401","aliases":["BIT-pillow-2026-112401","GHSA-74r2-7ff9-mjj2"],"summary":"Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()","severity":"medium","score":6.9,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112401/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112891","aliases":["BIT-pillow-2026-112891","GHSA-fc9g-5qg7-mf45"],"summary":"Pillow: Quadratic GIF comment copying during save","severity":"medium","score":6.9,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112891/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112898","aliases":["BIT-pillow-2026-112898","GHSA-rfgq-q3w2-pmv2"],"summary":"Pillow: Image.quantize() with empty palette leaks uninitialized stack memory","severity":"medium","score":6.9,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112898/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112899","aliases":["GHSA-vx6w-vv9f-6gvg"],"summary":"Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit","severity":"medium","score":6.9,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112899/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112395","aliases":["BIT-pillow-2026-112395","GHSA-462x-pgg6-55fp"],"summary":"Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)","severity":"medium","score":6.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112395/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-59198","aliases":["BIT-pillow-2026-59198","GHSA-fj7v-r99m-22gq","PYSEC-2026-3494"],"summary":"Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images","severity":"medium","score":6.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-59198/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96636","aliases":["BIT-pillow-2026-96636","GHSA-p8hx-v2p6-rp84","PYSEC-2026-4337"],"summary":"Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)","severity":"medium","score":6.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96636/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96638","aliases":["BIT-pillow-2026-96638","GHSA-24rc-8hj2-v98c"],"summary":"Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode","severity":"medium","score":6.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96638/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-96641","aliases":["BIT-pillow-2026-96641","GHSA-4rm8-3hmm-39fg","PYSEC-2026-4340"],"summary":"Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise","severity":"medium","score":6.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-96641/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-112391","aliases":["BIT-pillow-2026-112391","GHSA-254f-3936-288h"],"summary":"Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()","severity":"medium","score":6.3,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-112391/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-114501","aliases":["BIT-pillow-2026-114501","GHSA-654x-cwwv-5j9c","PYSEC-2026-4336"],"summary":"Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1","severity":"medium","score":6.3,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["13.0.0"],"url":"https://insights.sbomify.com/CVE-2026-114501/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-42308","aliases":["BIT-pillow-2026-42308","GHSA-wjx4-4jcj-g98j","PYSEC-2026-165"],"summary":"Pillow has an integer overflow when processing fonts","severity":"medium","score":5.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.2.0"],"url":"https://insights.sbomify.com/CVE-2026-42308/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-42309","aliases":["BIT-pillow-2026-42309","GHSA-5xmw-vc9v-4wf2","PYSEC-2026-2251"],"summary":"Pillow has a heap buffer overflow with nested list coordinates","severity":"medium","score":5.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.2.0"],"url":"https://insights.sbomify.com/CVE-2026-42309/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-42310","aliases":["BIT-pillow-2026-42310","GHSA-r73j-pqj5-w3x7","PYSEC-2026-2874"],"summary":"Pillow has a PDF Parsing Trailer Infinite Loop (DoS)","severity":"medium","score":5.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.2.0"],"url":"https://insights.sbomify.com/CVE-2026-42310/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-55798","aliases":["BIT-pillow-2026-55798","GHSA-4x4j-2g7c-83w6","PYSEC-2026-2257"],"summary":"Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path","severity":"medium","score":4.5,"package":"pillow","version":"12.1.0","ecosystem":"PyPI","purl":"pkg:pypi/pillow@12.1.0?file_name=pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","fixed":["12.3.0"],"url":"https://insights.sbomify.com/CVE-2026-55798/","wheels":["pillow-12.1.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp310-cp310-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp311-cp311-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp312-cp312-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314-musllinux_1_2_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pillow-12.1.0-cp314-cp314t-musllinux_1_2_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl","pillow-12.1.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":46,"total_sboms":46,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":5,"high":40,"medium":15}}}