{"id":"CLSA-2026-1792648427","summary":"TuxCare security update for pillow (7 CVEs)","details":"TuxCare rebuilt pillow to address 7 CVEs. Fixed in 8.4.0.post9+tuxcare.","modified":"2026-10-22T07:45:02.717956143Z","published":"2026-10-22T05:53:47Z","upstream":["CVE-2026-112397","CVE-2026-112403","CVE-2026-112404","CVE-2026-112895","CVE-2026-112896","CVE-2026-112897","CVE-2026-112899"],"affected":[{"package":{"name":"pillow","ecosystem":"TuxCare:PyPI","purl":"pkg:pypi/pillow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.4.0"},{"fixed":"8.4.0.post9+tuxcare"}]}],"versions":["8.4.0","8.4.0.post1+tuxcare","8.4.0.post2+tuxcare","8.4.0.post3+tuxcare","8.4.0.post4+tuxcare","8.4.0.post5+tuxcare","8.4.0.post6+tuxcare","8.4.0.post7+tuxcare","8.4.0.post8+tuxcare"],"database_specific":{"tuxcare":{"fixed_version":"8.4.0.post9+tuxcare","base_version":"8.4.0"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1792648427.json"}}],"schema_version":"1.9.0"}