Search for packages
| purl | pkg:deb/debian/pillow@11.1.0-5%2Bdeb13u2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-ca8h-871t-t3dd | FITS GZIP decompression bomb in Pillow |
CVE-2026-40192
GHSA-whj4-6x5x-4v2j |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-01T23:37:01.970551+00:00 | Debian Importer | Fixing | VCID-ca8h-871t-t3dd | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |
| 2026-04-27T00:51:57.634353+00:00 | Debian Importer | Fixing | VCID-ca8h-871t-t3dd | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |