VULNRABLE / Vulnerability / GHSA-78g4-xqwv-q3g8
GHSA-78g4-xqwv-q3g8
HIGH LOW pillow OSV
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
—
Source
OSV
Summary
Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()
What this means
GHSA-78g4-xqwv-q3g8 is a high-severity vulnerability affecting pillow, rated CVSS 8. Published October 22, 2026.
View full advisory at OSV →