VULNRABLE / Vulnerability / CVE-2026-112899
CVE-2026-112899
MEDIUM LOW pillow OSV
Exploit verdict: No active-exploit signal
CVSS Score
6
Severity
MEDIUM
EPSS
—
Source
OSV
Summary
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
What this means
CVE-2026-112899 is a medium-severity vulnerability affecting pillow, rated CVSS 6. Published October 20, 2026.
View full advisory at OSV →