StackRadar

CVE-2026-112899

Medium

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
238
of 18,208 indexed, latest versions
Container images
231
deployed by those charts
Fix available
1 of 1
affected package

Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

Carried by container images the latest versions of 238 of 18,208 indexed charts deploy, on 231 images.

Affected packageAffected versionsFixed inImages
pillowpypi2.6.1, 4.0.0, 4.3.0, 5.0.0+36 more13.0.0231
OSV records
GHSA-vx6w-vv9f-6gvg

Charts affected

238 by stars
ChartLatestAffected imagesRadar Score
pgadmin4runixVerified publisher1.70.41 of 1See more

pgadmin4 runix 1.70.4

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.18c332c5f6dfba
pillow@12.3.0
13.0.0

Open the chart page →

114
mlflowcommunity-chartsVerified publisher1.11.71 of 1See more

mlflow community-charts 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
burakince/mlflow:3.16.0ab4b566644b9
pillow@12.3.0
13.0.0

Open the chart page →

1,060
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
pillow@9.2.0
13.0.0

Open the chart page →

9,934
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
pillow@11.0.0
13.0.0

Open the chart page →

12,430
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pillow@9.1.0
13.0.0

Open the chart page →

9,174
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
pillow@10.4.0
13.0.0

Open the chart page →

7,709
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
pillow@10.0.1
13.0.0
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
pillow@10.2.0
13.0.0

Open the chart page →

14,626
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
pillow@10.1.0
13.0.0

Open the chart page →

7,459
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
pillow@10.4.0
13.0.0

Open the chart page →

4,333
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
pillow@10.3.0
13.0.0

Open the chart page →

35,835
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
pillow@12.2.0
13.0.0

Open the chart page →

5,432
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
pillow@11.1.0
13.0.0

Open the chart page →

21,686
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
pillow@12.3.0
13.0.0

Open the chart page →

3,427
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
mide/minecraft-overviewer:latest4eee0dcb715f
pillow@8.1.2
13.0.0

Open the chart page →

3,902
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
pillow@12.3.0
13.0.0

Open the chart page →

114
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
pillow@10.2.0
13.0.0

Open the chart page →

17,807
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
pillow@10.2.0
13.0.0

Open the chart page →

86,629
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
pillow@8.2.0
13.0.0

Open the chart page →

8,424
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
pillow@10.3.0
13.0.0

Open the chart page →

1,913
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
pillow@9.4.0
13.0.0

Open the chart page →

10,548
convertigoconvertigoOfficialVerified publisher8.4.61 of 5See more

convertigo convertigo 8.4.6

1 of the 5 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
pillow@10.3.0
13.0.0

Open the chart page →

17,667
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
pillow@9.5.0
13.0.0

Open the chart page →

15,619
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
pillow@5.4.1
13.0.0

Open the chart page →

4,294
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
pillow@8.1.0
13.0.0

Open the chart page →

11,249
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
pillow@8.4.0
13.0.0

Open the chart page →

9,386
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
pillow@10.3.0
13.0.0

Open the chart page →

2,660
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
pillow@12.3.0
13.0.0

Open the chart page →

3,026
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
pillow@12.3.0
13.0.0

Open the chart page →

6,747
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
pillow@12.1.1
13.0.0

Open the chart page →

5,944
mlflow-tracking-servermlflow-tracking-serverVerified publisher4.1.01 of 1See more

mlflow-tracking-server mlflow-tracking-server 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/mlflow-oidc/mlflow-tracking-server:3.16.1-9.0.2-20261001970ba1cc1e69
pillow@12.3.0
13.0.0

Open the chart page →

659
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
pillow@9.1.0
13.0.0
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pillow@9.1.0
13.0.0

Open the chart page →

24,147
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
pillow@12.0.0
13.0.0

Open the chart page →

112,919
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pillow@12.0.0
13.0.0

Open the chart page →

4,822
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
wger/server:2.71c5789b93bfe
pillow@12.3.0
13.0.0

Open the chart page →

9,509
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
pillow@11.3.0
13.0.0

Open the chart page →

14,891
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
pillow@9.4.0
13.0.0
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
pillow@9.4.0
13.0.0

Open the chart page →

25,961
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
pillow@12.3.0
13.0.0

Open the chart page →

7,940
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
pillow@10.3.0
13.0.0

Open the chart page →

2,544
squestchristianhuthVerified publisher7.0.21 of 4See more

squest christianhuth 7.0.2

1 of the 4 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
pillow@10.3.0
13.0.0

Open the chart page →

5,062
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
pillow@10.2.0
13.0.0

Open the chart page →

13,401
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
pillow@10.4.0
13.0.0

Open the chart page →

16,427
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
pillow@10.1.0
13.0.0

Open the chart page →

2,054
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
apsl/thumbor:6.7.051e2de5c2c70
pillow@5.4.1
13.0.0

Open the chart page →

43,195
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
pillow@7.2.0
13.0.0

Open the chart page →

10,903
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
pillow@9.0.1
13.0.0

Open the chart page →

8,031
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
pillow@10.2.0
13.0.0

Open the chart page →

78,068
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
pillow@12.2.0
13.0.0

Open the chart page →

41,282
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
pillow@11.2.1
13.0.0

Open the chart page →

2,000
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
pillow@12.0.0
13.0.0

Open the chart page →

10,248
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-112899.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
pillow@8.3.2
13.0.0

Open the chart page →

7,086

Container images carrying it

231 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
daskdev/dask-notebook:1.1.0052630f5ca04
pillow@5.4.1
13.0.0
1
datamate/seafile-professional:11.0.202dd66b722464
pillow@10.2.0
13.0.0
1
deconzcommunity/deconz:2.29.2062de2362641
pillow@9.4.0
13.0.0
1
deconzcommunity/deconz:2.26.123c86008d73f
pillow@9.4.0
13.0.0
1
deconzcommunity/deconz:2.12.066541bbb78952
pillow@5.4.1
13.0.0
1
dpage/pgadmin4:7.537946e4f3e7b
pillow@9.5.0
13.0.0
1
dpage/pgadmin4:9.11.050700ac17936
pillow@12.0.0
13.0.0
1
dpage/pgadmin4:9.252cb72a9e3da
pillow@11.1.0
13.0.0
1
dpage/pgadmin4:8.13561c1f8f99f2
pillow@11.0.0
13.0.0
1
esphome/esphome:1.18.03f51ec10e823
pillow@5.4.1
13.0.0
1
esphome/esphome:2024.3.09ab8cc88b28c
pillow@10.2.0
13.0.0
1
esphome/esphome:2024.12.2b2c6322700ac
pillow@10.4.0
13.0.0
1
esphome/esphome:2025.3.0def8b6e4f517
pillow@10.4.0
13.0.0
1
evk02/mlflow:2.2.1ef6ff257ef35
pillow@9.4.0
13.0.0
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
pillow@9.3.0
13.0.0
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
pillow@11.2.1
13.0.0
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
pillow@7.2.0
13.0.0
1
hhyo/archery:v1.9.11aa41843419e
pillow@9.0.1
13.0.0
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
pillow@8.4.0
13.0.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pillow@10.0.1
13.0.0
1
homeassistant/home-assistant:2022.3.5565751f33794
pillow@9.0.1
13.0.0
1
homeassistant/home-assistant:2026.75a531753cea9
pillow@12.2.0
13.0.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
pillow@10.1.0
13.0.0
1
huginn/huginn:4df1217d3055db980a04f293e28016b77826e3caeab0db98264e
pillow@5.1.0
13.0.0
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
pillow@12.0.0
13.0.0
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pillow@8.2.0
13.0.0
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
pillow@11.0.0
13.0.0
1
kobotoolbox/kobocat:2.022.24ab15679454415
pillow@9.1.0
13.0.0
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pillow@9.1.0
13.0.0
1
langgenius/dify-api:1.0.0066035f93856
pillow@11.1.0
13.0.0
1
langgenius/dify-api:0.6.11fca918260dd6
pillow@10.3.0
13.0.0
1
linuxserver/babybuddy:1.10.2f7d7c7704249
pillow@9.0.1
13.0.0
1
linuxserver/calibre-web:0.6.24241009026e6f
pillow@11.3.0
13.0.0
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pillow@5.4.1
13.0.0
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
pillow@6.2.1
13.0.0
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
pillow@11.2.1
13.0.0
1
linuxserver/deluge:18.04.10ac871624394
pillow@5.1.0
13.0.0
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pillow@5.1.0
13.0.0
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
pillow@8.2.0
13.0.0
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pillow@6.2.1
13.0.0
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
pillow@12.1.1
13.0.0
1
lsstsqre/exposurelog:0.8.079b00fb67a65
pillow@9.0.1
13.0.0
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
pillow@12.3.0
13.0.0
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
pillow@12.3.0
13.0.0
1
mathesar/mathesar:0.12.0091757cb01fe
pillow@12.1.1
13.0.0
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
pillow@11.1.0
13.0.0
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
pillow@9.0.1
13.0.0
1
matrixdotorg/synapse:v1.78.0def97fd537d8
pillow@9.4.0
13.0.0
1
mcp/kubernetes:latest5ffbf7f0a8aa
pillow@9.4.0
13.0.0
1
mcronce/yadms-ftp:latestf820ef2e3c26
pillow@7.0.0
13.0.0
1

syft 1.42.1 · advisories as of 20 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.