Cyber ·
Pillow 13.0.0 fixes a long list of security vulnerabilities
The Pillow image processing library released version 13.0.0 with several security fixes, detailed in the release notes and in GHSA advisories published by the project.
On October 21, 2026, Alan Coopersmith posted to the oss-sec mailing list feed that Pillow 13.0.0 includes several security fixes. The post is a machine translation of the original content and states that the release notes list many of these fixes, while details for each issue are in the GHSA advisories maintained by the project in the library's official repository.
The excerpt received does not include the individual list of vulnerabilities, identifiers, severity levels or affected versions. To learn what applies to your case, read the 13.0.0 release notes and the project's security advisories section, both referenced in the original source, and check which version is installed in your environment. Anyone who processes images sent by third parties with this library should assess the upgrade with priority proportional to the risk.
If you use an AI assistant to study the advisory or plan the upgrade, paste only public excerpts. Remove internal server names, credentials, keys, paths containing customer data and any personal data from logs before sending.
Original source: Pillow 13.0.0 corrige uma longa lista de vulnerabilidades