StackRadar

CVE-2026-112405

High

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
128
of 18,219 indexed, latest versions
Container images
106
deployed by those charts
Fix available
1 of 2
affected packages

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Carried by container images the latest versions of 128 of 18,219 indexed charts deploy, on 106 images.

Affected packageAffected versionsFixed inImages
pillowpypi12.0.0, 12.1.0, 12.1.1, 12.2.0+1 more13.0.0101
pillowdeb9.4.0-1.1+b1, 9.4.0-1.1+deb12u1no fix listed5
OSV records
DEBIAN-CVE-2026-112405GHSA-cp9v-662q-vvx9

Charts affected

128 by stars
ChartLatestAffected imagesRadar Score
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
pillow@9.4.0-1.1+deb12u1
no fix listed

Open the chart page →

7,346
esphome-device-buildernewbenji-chartsVerified publisher0.1.11 of 1See more

esphome-device-builder newbenji-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.7.4e636269c6390
pillow@12.3.0
13.0.0

Open the chart page →

4,077
home-assistantnewbenji-chartsVerified publisher0.7.21 of 1See more

home-assistant newbenji-charts 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.8.0a21689ef0510
pillow@12.3.0
13.0.0

Open the chart page →

4,027
music-assistantnewbenji-chartsVerified publisher0.1.01 of 1See more

music-assistant newbenji-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
pillow@12.3.0
13.0.0

Open the chart page →

5,255
paperless-ngxoli-the-devVerified publisher1.3.21 of 1See more

paperless-ngx oli-the-dev 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
pillow@12.3.0
13.0.0

Open the chart page →

5,685
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest92b8fab500f9
pillow@12.3.0
13.0.0

Open the chart page →

9,240
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
pillow@12.0.0
13.0.0

Open the chart page →

6,937
label-studioquench-label-studioVerified publisher0.0.131 of 2See more

label-studio quench-label-studio 0.0.13

1 of the 2 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/label-studiodigest-pinned5dade160df8a
pillow@12.3.0
13.0.0

Open the chart page →

496
ml-stackquench-ml-stackVerified publisher0.0.211 of 5See more

ml-stack quench-ml-stack 0.0.21

1 of the 5 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/label-studiodigest-pinned5dade160df8a
pillow@12.3.0
13.0.0

Open the chart page →

678
pgadminquench-pgadminVerified publisher0.0.71 of 1See more

pgadmin quench-pgadmin 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/pgadmindigest-pinnedb360157974f5
pillow@12.3.0
13.0.0

Open the chart page →

495
plonequench-ploneVerified publisher0.0.21 of 1See more

plone quench-plone 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/plonedigest-pinnede80d1e9bcc81
pillow@12.3.0
13.0.0

Open the chart page →

467
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
pillow@9.4.0-1.1+deb12u1
no fix listed

Open the chart page →

9,620
delugeretsamedocVerified publisher26.9.01 of 1See more

deluge retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
linuxserver/deluge:2.2.0bf306ddd5e6d
pillow@12.3.0
13.0.0

Open the chart page →

442
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
beanbag/reviewboard:latest6b840f546e1c
pillow@12.3.0
13.0.0

Open the chart page →

7,628
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
rommapp/romm:5.2.03512f2ca4557
pillow@12.3.0
13.0.0

Open the chart page →

4,447
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
pillow@12.2.0
13.0.0

Open the chart page →

9,934
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
pillow@12.2.0
13.0.0

Open the chart page →

2,455
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
pillow@12.2.0
13.0.0
safeglobal/safe-transaction-service:latest7b576c73f865
pillow@12.3.0
13.0.0

Open the chart page →

105,426
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
pillow@12.3.0
13.0.0

Open the chart page →

101,565
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
redimp/otterwiki:21435c8cc536d
pillow@12.3.0
13.0.0

Open the chart page →

3,349
search-proxysearch-proxy2026.42.31 of 1See more

search-proxy search-proxy 2026.42.3

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/unique-ag/ai/search-proxy:2026.42.32f87faa4af66
pillow@12.2.0
13.0.0

Open the chart page →

2,134
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
pillow@12.1.1
13.0.0

Open the chart page →

6,456
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
pillow@12.3.0
13.0.0

Open the chart page →

36,570
pgadminsikalabs0.1.01 of 2See more

pgadmin sikalabs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
pillow@12.3.0
13.0.0

Open the chart page →

449
deconzsmall-hack0.1.01 of 1See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.26.123c86008d73f
pillow@9.4.0-1.1+b1
no fix listed

Open the chart page →

14,935
home-assistantsmall-hack2.1.01 of 1See more

home-assistant small-hack 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.3.10e091dfce306
pillow@12.1.1
13.0.0

Open the chart page →

6,004
nemo-guardrailsupstreamyardVerified publisher0.1.11 of 1See more

nemo-guardrails upstreamyard 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pillow@12.3.0
13.0.0

Open the chart page →

1,739
changedetection-iozekker6Verified publisher1.104.01 of 1See more

changedetection-io zekker6 1.104.0

1 of the 1 container images this version deploys carry CVE-2026-112405.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.904eaae7915ba
pillow@12.3.0
13.0.0

Open the chart page →

2,728

Container images carrying it

106 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
mcp/kubernetes:latest5ffbf7f0a8aa
pillow@9.4.0-1.1+deb12u1
no fix listed
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
pillow@12.3.0
13.0.0
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
pillow@12.2.0
13.0.0
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
pillow@12.3.0
13.0.0
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
pillow@12.3.0
13.0.0
1
onyxdotapp/onyx-backend:latest92b8fab500f9
pillow@12.3.0
13.0.0
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
pillow@12.1.0
13.0.0
1
opennode/waldur-mastermind:8.1.382e8f276c5ed
pillow@12.3.0
13.0.0
1
pretix/standalone:2026.8.0ec17c2f761f7
pillow@12.3.0
13.0.0
1
prowlercloud/prowler-api:5.31.14f252d579be2
pillow@12.2.0
13.0.0
1
reallibrephotos/librephotos:1.2.1ecd7052f2b5f
pillow@12.3.0
13.0.0
1
redimp/otterwiki:21435c8cc536d
pillow@12.3.0
13.0.0
1
robustadev/krr:v1.30.0b8d782e568c7
pillow@12.3.0
13.0.0
1
rommapp/romm:5.2.03512f2ca4557
pillow@12.3.0
13.0.0
1
signalen/backend:2.50.1826bb090bc4e4
pillow@12.3.0
13.0.0
1
taigaio/taiga-back:latest4beed8f62c9f
pillow@12.0.0
13.0.0
1
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
pillow@12.3.0
13.0.0
1
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pillow@12.3.0
13.0.0
1
weblate/weblate:2026.10.1.26663a7c8b444
pillow@12.3.0
13.0.0
1
wger/server:2.71c5789b93bfe
pillow@12.3.0
13.0.0
1
ghcr.io/afairgiant/medikeep:v0.72.09285e26f6d0d
pillow@12.3.0
13.0.0
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
pillow@12.3.0
13.0.0
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latesta62ce2221b43
pillow@12.3.0
13.0.0
1
ghcr.io/esphome/esphome:latest776a845d5089
pillow@12.3.0
13.0.0
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
pillow@12.2.0
13.0.0
1
ghcr.io/esphome/esphome:2026.7.4e636269c6390
pillow@12.3.0
13.0.0
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
pillow@12.2.0
13.0.0
1
ghcr.io/home-assistant/home-assistant:2026.3.10e091dfce306
pillow@12.1.1
13.0.0
1
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
pillow@12.3.0
13.0.0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
pillow@12.0.0
13.0.0
1
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
pillow@12.3.0
13.0.0
1
ghcr.io/home-operations/bazarr:1.6.217dc1cff22e9
pillow@12.3.0
13.0.0
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
pillow@12.2.0
13.0.0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
pillow@12.1.1
13.0.0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
pillow@12.1.1
13.0.0
1
ghcr.io/immich-app/immich-machine-learning:v3.3.41ab8674e7cec
pillow@12.3.0
13.0.0
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
pillow@12.3.0
13.0.0
1
ghcr.io/liturgical-app/liturgical-api:1.0.12637bdcebdd8d
pillow@12.1.1
13.0.0
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pillow@12.0.0
13.0.0
1
ghcr.io/mlflow-oidc/mlflow-tracking-server:3.16.1-9.0.2-20261001970ba1cc1e69
pillow@12.3.0
13.0.0
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
pillow@12.3.0
13.0.0
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
pillow@12.1.1
13.0.0
1
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
pillow@12.3.0
13.0.0
1
ghcr.io/opendatacube/ows:1.9.17de29324e9801
pillow@12.3.0
13.0.0
1
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
pillow@12.3.0
13.0.0
1
ghcr.io/quenchworks/images/pgadminb360157974f5
pillow@12.3.0
13.0.0
1
ghcr.io/quenchworks/images/plonee80d1e9bcc81
pillow@12.3.0
13.0.0
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
pillow@12.3.0
13.0.0
1
ghcr.io/securo-finance/securo-backend:0.16.50e40c6858fb3
pillow@12.3.0
13.0.0
1
ghcr.io/unique-ag/ai/search-proxy:2026.42.32f87faa4af66
pillow@12.2.0
13.0.0
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.