CVE-2026-112401 is an inefficient algorithmic complexity vulnerability in the python-pillow Pillow library affecting GIF comment processing. The flaw causes Image.open() to consume CPU time quadratically relative to the size of crafted GIF comment extensions, leading to denial-of-service (DoS) via processor exhaustion. This occurs because the code repeatedly concatenates immutable bytes objects without size limits, causing excessive copying. The issue affects Pillow versions from 5.4.0 up to but not including 13.0.0 and was fixed in version 13.0.0.
CVE-2026-112400 is a high-severity vulnerability in the python-pillow Pillow library affecting versions from 9.2.0 up to but not including 13.0.0. It involves uncontrolled resource consumption due to a flaw in GIF frame size handling during decompression bomb checks. An attacker can craft a small GIF that causes Pillow to allocate gigabytes of memory, leading to denial of service by exhausting system memory. The issue arises because the image object retains a rejected oversized frame size after a DecompressionBombError, causing subsequent operations to allocate memory based on this stale size. This flaw does not cause memory corruption but can crash or kill the process due to out-of-memory conditions. The vulnerability was introduced in version 9.2.0 and fixed in version 13.0.0.
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS reaches PngImageFile._seek while Image.open() positions frame zero. The full-canvas allocation occurs inside Image.open() without requiring pixel loading or frame iteration. This can exhaust memory and deny service. This issue is fixed in version 13.0.0.
A heap-based buffer overflow vulnerability exists in the FlashPix JPEG-tile decoder of the Python Pillow library prior to version 13.0.0. This occurs when decoding crafted OLE2 FlashPix files, leading to writing beyond allocated buffer boundaries. The flaw can corrupt heap memory and potentially allow arbitrary code execution. The issue is fixed in Pillow version 13.0.0.
A use-after-free vulnerability exists in the python-pillow Pillow library when saving images as TIFF to an in-memory buffer. If libtiff rejects a tag during encoding, the encoder frees its output buffer but leaves the TIFF handle open. Later, during cleanup, a write occurs into the freed buffer, causing a crash and potential memory corruption. This affects Pillow versions from 11.3.0 up to but not including 13.0.0. The issue can lead to denial of service or potentially remote code execution when processing attacker-influenced images.
Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-copy loop walks beyond that allocation. An attacker can supply a crafted tiled TIFF to an application that loads it. This can expose adjacent heap data in pixels or crash the process. This issue is fixed in version 13.0.0.
CVE-2026-112394 is a buffer over-read vulnerability in the python-pillow Pillow library prior to version 13.0.0. The issue occurs in the P;2L and P;4L raw decoders, where the unpackers can read beyond the end of an input buffer due to a mismatch between the calculated packed-pixel row size and the actual unpacked bit planes. This can lead to disclosure of up to three adjacent heap bytes or cause a process crash. The vulnerability is fixed in Pillow version 13.0.0.
CVE-2026-112393 is a critical heap-based buffer overflow vulnerability in the Pillow library when saving TIFF images to in-memory destinations like io.BytesIO. The flaw occurs in the _tiffWriteProc function, which incorrectly reallocates memory based on the current buffer size rather than the write position, allowing writes past the allocated heap buffer. This can cause memory corruption and potential data leakage of heap contents. The vulnerability affects Pillow versions from 2.0.0 up to but not including 13.0.0 and was introduced in 2013. It can be triggered by processing attacker-controlled TIFF images with large out-of-line tags or embedded ICC profiles. The issue does not affect saving TIFF images to real files. A fix is available in Pillow 13.0.0.
A recursion depth check in the PdfParser.get_value() method of python-pillow's Pillow library is ineffective due to a default parameter value of -1 that never triggers the recursion limit guard. This allows crafted PDF files with deeply nested objects to cause a RecursionError when appending an image to an existing PDF using Image.save(..., format="PDF", append=True). The issue affects Pillow versions from 5.1.0 up to but not including 13.0.0 and is fixed in version 13.0.0.
CVE-2026-112390 is an infinite loop vulnerability in the python-pillow library's MIC image plugin. It occurs when processing a crafted Microsoft Image Composer (MIC) file containing an embedded TIFF with three or more image file directories (IFDs). The flaw causes the n_frames property to loop indefinitely at 100% CPU without raising exceptions or increasing memory usage. This affects Pillow versions from 7.2.0 up to but not including 13.0.0 when the optional olefile package is installed. The issue was introduced in April 2020 and fixed in version 13.0.0.
CVE-2026-112297 is a server-side request forgery (SSRF) vulnerability in ptbsare anx-calibre-manager versions 1.13.0 through 1.13.12. The flaw exists in the LLMClient.chat function within the blueprints/api/llm.py file, specifically in the LLM Configuration Handler component. An attacker can remotely manipulate the base_url argument to trigger SSRF. Exploit code has been published, but there is no vendor response or patch available at this time.
Cognition versions before 0.13.0 have an unauthenticated remote code execution vulnerability. The product defaults its agent sandbox backend to local execution and lacks authentication on its REST/SSE API. Attackers can create sessions and send messages without credentials, causing execution of arbitrary shell commands on the server process. This vulnerability is fixed in version 0.13.0.
CVE-2026-111755 is a high-severity vulnerability in the node-follow-redirects library, a Node.js HTTP and HTTPS client wrapper. It affects specific versions 1.2.4-1, 1.13.1-1, and 1.14.5-1. The vulnerability has a CVSS 4.0 base score of 8.2, indicating a network attack vector with low complexity and no user interaction required. The vulnerability allows partial impact on confidentiality but no impact on integrity or availability. No public exploits or known active exploitation have been reported.
Bulletin ID: 2026-054-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/14/2026 13:00 PM PDT Description: AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. We identified CVE-2026-15643, a server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all platforms might allow a remote authenticated user to exfiltrate AWS temporary security credentials to an arbitrary endpoint via a crafted next_token parameter. The server does not validate that pagination URLs point back to the expected HealthLake endpoint, allowing an actor to redirect subsequent requests to an actor-controlled server. Impacted versions: < 0.0.14 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.