CVE-2026-96639
CriticalAdvisory
Published 21 Oct 2026In the index since 23 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.006
- 46th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 175
- of 18,232 indexed, latest versions
- Container images
- 156
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Carried by container images the latest versions of 175 of 18,232 indexed charts deploy, on 156 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pillowpypi | 11.0.0, 11.1.0, 11.2.1, 11.3.0+5 more | 13.0.0 | 143 |
| pillowdeb | 5.1.0-1, 5.1.0-1ubuntu0.6, 5.1.0-1ubuntu0.7, 7.0.0-4ubuntu0.5+7 more | no fix listed | 15 |
- OSV records
- DEBIAN-CVE-2026-96639GHSA-v9pv-5gc8-w2m6UBUNTU-CVE-2026-96639
- Trending
- Rank 21 in indexed charts, since 24 Oct 2026. See the ranking →
Charts affected
175 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| geomapfishgeomapfish | 0.8.0 | 1 of 3See more | 8,072 |
| rag-apihajowielandVerified publisher | 1.0.0 | 1 of 1See more | 2,165 |
| home-assistanthelm-chart-roeiVerified publisher | 2025.3.0 | 1 of 1See more | 6,874 |
| supersethelm-charts-nr | 1.1.3 | 1 of 1See more | 31,616 |
| changedetectionhelmforgeVerified publisher | 1.1.20 | 1 of 1See more | 3,129 |
| hermes-agenthelmforgeVerified publisher | 1.0.2 | 1 of 1See more | 8,093 |
| immichhelmforgeVerified publisher | 1.2.13 | 1 of 5See more | 13,985 |
| langflowhelmforgeVerified publisher | 2.0.4 | 1 of 1See more | 861 |
| medikeephelmforgeVerified publisher | 2.0.5 | 1 of 3See more | 7,094 |
| netboxhelmforgeVerified publisher | 2.0.5 | 1 of 4See more | 5,685 |
| paperless-ngxhelmforgeVerified publisher | 1.1.1 | 1 of 4See more | 8,878 |
| supersethelmforgeVerified publisher | 1.4.2 | 1 of 5See more | 35,531 |
| webodmhelmforgeVerified publisher | 1.1.2 | 1 of 4See more | 13,492 |
| openaevhelm-openbasVerified publisher | 2.0.17 | 1 of 7See more | 80,323 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 85,165 |
| huginnhomeenterpriseinc | 0.2.0 | 1 of 1See more | 74,967 |
| paperlesshpVerified publisher | 0.1.2 | 1 of 5See more | 42,418 |
| ilum-streamlitilumVerified publisher | 0.1.0 | 1 of 1See more | 3,684 |
| guardrails-usvcinfracloud-chartsVerified publisher | 1.0.1 | 1 of 1See more | 6,141 |
| label-studioinseefrlab | 2.3.1 | 1 of 3See more | 881 |
| pgadmininseefrlab | 3.2.0 | 1 of 1See more | 644 |
| intelowlintelowl-helm | 6.6.1-01-06-2026 | 1 of 5See more | 98,094 |
| inventreeinventreeOfficialVerified publisher | 0.4.34 | 1 of 2See more | 6,610 |
| deconzjanip81-helm-chartsVerified publisher | 0.1.1 | 1 of 1See more | 13,492 |
| esphomejeffrescVerified publisher | 0.2.2 | 1 of 1See more | 51,184 |
| bazarrk8s-home-lab-repo | 11.3.2 | 1 of 1See more | 2,570 |
| beetsk8s-home-lab-repo | 3.1.1 | 1 of 1See more | 3,823 |
| paperlessk8s-home-lab-repo | 11.0.1 | 1 of 1See more | 12,297 |
| librephotosk8sonlabVerified publisher | 1.2.0 | 1 of 7See more | 18,628 |
| music-assistantkarljorgensen | 0.1.3 | 1 of 1See more | 9,546 |
| delugelinkding | 0.2.3 | 1 of 1See more | 2,497 |
| calendar-apiliturgical | 0.1.5 | 1 of 1See more | 2,224 |
| liturgical-apiliturgical | 0.2.11 | 1 of 1See more | 1,680 |
| home-assistantlmatfyVerified publisher | 0.1.38 | 1 of 1See more | 4,718 |
| bazarrm0nsterrr-bazarrVerified publisher | 2.4.0 | 1 of 1See more | 747 |
| mcp-kubernetesmcp-helmVerified publisher | 0.2.7 | 1 of 1See more | 7,815 |
| meerschaummeerschaumVerified publisher | 0.2.0 | 1 of 1See more | 65,632 |
| paperless-ngxmt190502 | 7.6.14 | 1 of 4See more | 15,245 |
| szurubooru-servermy0nVerified publisher | 0.2.5 | 1 of 3See more | 1,839 |
| neurofaceneurofaceVerified publisher | 1.4.2 | 1 of 3See more | 9,808 |
| esphome-device-buildernewbenji-chartsVerified publisher | 0.1.1 | 1 of 1See more | 4,491 |
| home-assistantnewbenji-chartsVerified publisher | 0.7.2 | 1 of 1See more | 4,468 |
| music-assistantnewbenji-chartsVerified publisher | 0.1.0 | 1 of 1See more | 5,747 |
| paperless-ngxoli-the-devVerified publisher | 1.3.2 | 1 of 1See more | 6,319 |
| ctfdpascaliskeVerified publisher | 2.0.0 | 1 of 1See more | 3,183 |
| home-assistantpascaliskeVerified publisher | 0.1.1 | 1 of 1See more | 7,266 |
| powerdnspuckpuck | 2.0.0 | 1 of 4See more | 6,611 |
| cupsr2dlan-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 10,197 |
| delugeretsamedocVerified publisher | 26.9.0 | 1 of 1See more | 636 |
| rhbk-neurofacerhbk-neurofaceVerified publisher | 1.0.0 | 1 of 4See more | 5,235 |
Container images carrying it
156 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| huginn/ | eab0db98264e | pillow | no fix listed | 1 |
| ilum/ | ce5dcdeb22ba | pillow | 13.0.0 | 1 |
| intelowlproject/ | 0b22e547ea6b | pillow | 13.0.0 | 1 |
| inventree/ | 7c1e251a6c52 | pillow pillow | no fix listed 13.0.0 | 1 |
| langgenius/ | bdb2ed516bd3 | pillow | 13.0.0 | 1 |
| langgenius/ | 066035f93856 | pillow | 13.0.0 | 1 |
| langgenius/ | 52be6088dd84 | pillow | 13.0.0 | 1 |
| linuxserver/ | fb0437897eaa | pillow | 13.0.0 | 1 |
| linuxserver/ | 241009026e6f | pillow | 13.0.0 | 1 |
| linuxserver/ | 052eac68ccc0 | pillow | 13.0.0 | 1 |
| linuxserver/ | 0ac871624394 | pillow | no fix listed | 1 |
| linuxserver/ | 2ce561a95e7b | pillow | no fix listed | 1 |
| linuxserver/ | bf306ddd5e6d | pillow | 13.0.0 | 1 |
| litellm/ | 09b217802ded | pillow | 13.0.0 | 1 |
| loeken/ | b1dff5b4c593 | pillow | 13.0.0 | 1 |
| maponyacharles/ | 42d418654ebd | pillow | 13.0.0 | 1 |
| maponyacharles/ | 7b37b092130a | pillow | 13.0.0 | 1 |
| mathesar/ | 091757cb01fe | pillow | 13.0.0 | 1 |
| matrixdotorg/ | 41d8a4edfdc6 | pillow | 13.0.0 | 1 |
| matrixdotorg/ | c3c4a9de2a0b | pillow | 13.0.0 | 1 |
| mcp/ | 5ffbf7f0a8aa | pillow | no fix listed | 1 |
| netboxcommunity/ | 91b823a05cb5 | pillow | 13.0.0 | 1 |
| networktocode/ | ed484336b1ad | pillow | 13.0.0 | 1 |
| nousresearch/ | e0df6adebddf | pillow | 13.0.0 | 1 |
| nousresearch/ | fca358f12efd | pillow | 13.0.0 | 1 |
| opea/ | f68bec6a1271 | pillow | 13.0.0 | 1 |
| opencsghq/ | 41cba9c366f1 | pillow | 13.0.0 | 1 |
| opencsghq/ | 7d0271e26521 | pillow | 13.0.0 | 1 |
| opencsghq/ | c36a5bac3cf0 | pillow | 13.0.0 | 1 |
| opendatacube/ | 668cbb41473c | pillow | no fix listed | 1 |
| opendatacube/ | 1b90cdf68831 | pillow | no fix listed | 1 |
| opendatacube/ | 80df355a660b | pillow | no fix listed | 1 |
| opendronemap/ | fcd99eb23d8d | pillow | 13.0.0 | 1 |
| openmined/ | b72f74a68b32 | pillow | 13.0.0 | 1 |
| opennode/ | 82e8f276c5ed | pillow | 13.0.0 | 1 |
| pretix/ | ec17c2f761f7 | pillow | 13.0.0 | 1 |
| prowlercloud/ | 4f252d579be2 | pillow | 13.0.0 | 1 |
| pschiffe/ | 37ebba8c2b8f | pillow | 13.0.0 | 1 |
| reallibrephotos/ | 11418bf5d617 | pillow | 13.0.0 | 1 |
| redimp/ | b7ece5b8d7cc | pillow | 13.0.0 | 1 |
| robustadev/ | b8d782e568c7 | pillow | 13.0.0 | 1 |
| rommapp/ | 3512f2ca4557 | pillow | 13.0.0 | 1 |
| saidsef/ | f17f7c435891 | pillow | 13.0.0 | 1 |
| schmitzis/ | c583f1be2af2 | pillow | 13.0.0 | 1 |
| signalen/ | 26bb090bc4e4 | pillow | 13.0.0 | 1 |
| sruthitanneru/ | e565ea454ffd | pillow | 13.0.0 | 1 |
| szurubooru/ | accf2ad9fbc3 | pillow | 13.0.0 | 1 |
| taigaio/ | 4beed8f62c9f | pillow | 13.0.0 | 1 |
| timescale/ | e8d0a9cc3db5 | pillow | 13.0.0 | 1 |
| tombursch/ | 4a7ed693531b | pillow | 13.0.0 | 1 |