{"id":"CLSA-2026-1792753381","summary":"TuxCare security update for pillow (10 CVEs)","details":"TuxCare rebuilt pillow to address 10 CVEs. Fixed in 10.4.0.post12+tuxcare.","modified":"2026-10-23T13:45:07.413104608Z","published":"2026-10-23T11:03:01Z","upstream":["CVE-2026-112390","CVE-2026-112392","CVE-2026-112393","CVE-2026-112399","CVE-2026-112402","CVE-2026-112406","CVE-2026-112892","CVE-2026-112893","CVE-2026-112894","CVE-2026-112900"],"affected":[{"package":{"name":"pillow","ecosystem":"TuxCare:PyPI","purl":"pkg:pypi/pillow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.4.0"},{"fixed":"10.4.0.post12+tuxcare"}]}],"versions":["10.4.0","10.4.0.post1+tuxcare","10.4.0.post10+tuxcare","10.4.0.post11+tuxcare","10.4.0.post2+tuxcare","10.4.0.post3+tuxcare","10.4.0.post4+tuxcare","10.4.0.post5+tuxcare","10.4.0.post6+tuxcare","10.4.0.post7+tuxcare","10.4.0.post8+tuxcare","10.4.0.post9+tuxcare"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1792753381.json","tuxcare":{"fixed_version":"10.4.0.post12+tuxcare","base_version":"10.4.0"}}}],"schema_version":"1.9.0"}