StackRadar

CVE-2026-96639

Critical

Advisory

Published 21 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 18,232 indexed, latest versions
Container images
156
deployed by those charts
Fix available
1 of 2
affected packages

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

Carried by container images the latest versions of 175 of 18,232 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
pillowpypi11.0.0, 11.1.0, 11.2.1, 11.3.0+5 more13.0.0143
pillowdeb5.1.0-1, 5.1.0-1ubuntu0.6, 5.1.0-1ubuntu0.7, 7.0.0-4ubuntu0.5+7 moreno fix listed15
OSV records
DEBIAN-CVE-2026-96639GHSA-v9pv-5gc8-w2m6UBUNTU-CVE-2026-96639
Trending
Rank 21 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
kresusrm3lVerified publisher0.3.01 of 3See more

kresus rm3l 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
pillow@11.0.0
13.0.0

Open the chart page →

79,206
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
pillow@11.1.0
13.0.0

Open the chart page →

12,822
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
beanbag/reviewboard:latest67113ac4f99a
pillow@12.3.0
13.0.0

Open the chart page →

7,100
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
rommapp/romm:5.2.03512f2ca4557
pillow@12.3.0
13.0.0

Open the chart page →

4,706
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
pillow@12.2.0
13.0.0

Open the chart page →

10,318
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
pillow@11.3.0
13.0.0

Open the chart page →

13,887
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
pillow@11.3.0
13.0.0

Open the chart page →

5,776
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
pillow@12.2.0
13.0.0

Open the chart page →

2,701
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
pillow@12.2.0
13.0.0
safeglobal/safe-transaction-service:latest7b576c73f865
pillow@12.3.0
13.0.0

Open the chart page →

106,910
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest7b576c73f865
pillow@12.3.0
13.0.0

Open the chart page →

102,808
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
pillow@11.0.0
13.0.0

Open the chart page →

2,367
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
pillow@11.1.0
13.0.0

Open the chart page →

4,055
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
redimp/otterwiki:2b7ece5b8d7cc
pillow@12.3.0
13.0.0

Open the chart page →

3,410
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
pillow@11.3.0
13.0.0

Open the chart page →

45,498
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
pillow@12.1.1
13.0.0

Open the chart page →

6,719
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
pillow@12.3.0
13.0.0

Open the chart page →

38,204
pgadminsikalabs0.1.01 of 2See more

pgadmin sikalabs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
pillow@12.3.0
13.0.0

Open the chart page →

644
deconzsmall-hack0.1.01 of 1See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.26.123c86008d73f
pillow@9.4.0-1.1+b1
no fix listed

Open the chart page →

14,935
home-assistantsmall-hack2.1.01 of 1See more

home-assistant small-hack 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.3.10e091dfce306
pillow@12.1.1
13.0.0

Open the chart page →

6,160
srsran-5gsrsran-5gVerified publisher1.0.01 of 1See more

srsran-5g srsran-5g 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
gradiant/srsran-5g:23_10_19061b1bf0f36
pillow@7.0.0-4ubuntu0.9
no fix listed

Open the chart page →

68,303
srsran-5g-zmqsrsran-5g-zmqVerified publisher1.0.11 of 2See more

srsran-5g-zmq srsran-5g-zmq 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
gradiant/srsran-5g:23_10_19061b1bf0f36
pillow@7.0.0-4ubuntu0.9
no fix listed

Open the chart page →

74,187
nemo-guardrailsupstreamyardVerified publisher0.1.11 of 1See more

nemo-guardrails upstreamyard 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
upstreamyard/nemo-guardrails:0.24.19f673183cfc0
pillow@12.3.0
13.0.0

Open the chart page →

1,987
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pillow@11.1.0
13.0.0

Open the chart page →

6,943
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
pillow@11.3.0
13.0.0

Open the chart page →

10,663
changedetection-iozekker6Verified publisher1.104.01 of 1See more

changedetection-io zekker6 1.104.0

1 of the 1 container images this version deploys carry CVE-2026-96639.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.904eaae7915ba
pillow@12.3.0
13.0.0

Open the chart page →

3,129

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:9.17:9.18:latestc332c5f6dfba
pillow@12.3.0
13.0.0
5
ghcr.io/dgtlmoon/changedetection.io:0.60.9:latest04eaae7915ba
pillow@12.3.0
13.0.0
4
apache/superset:6.1.0:latest16b50bbef664
pillow@11.3.0
13.0.0
3
langflowai/langflow:1.12.6:latesta0396e089eb9
pillow@12.3.0
13.0.0
3
ghcr.io/home-assistant/home-assistant:2026.10.3407b89cd11a8
pillow@12.3.0
13.0.0
3
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
pillow@12.3.0
13.0.0
3
gisaia/aproc-service:0.21.0ec396328a6fd
pillow@12.3.0
13.0.0
2
gisaia/fam:0.21.0eeb6311803d2
pillow@12.3.0
13.0.0
2
gradiant/srsran-5g:23_10_19061b1bf0f36
pillow@7.0.0-4ubuntu0.9
no fix listed
2
openbas/caldera-server:5.1.0a277796d9724
pillow@11.1.0
13.0.0
2
opencsghq/label-studio:v2.6.0-llm-back03da7327c91e
pillow@12.3.0
13.0.0
2
opencsghq/label-studio:v2.6.01f6764097129
pillow@11.3.0
13.0.0
2
safeglobal/safe-config-service:latest09a5e495c219
pillow@12.2.0
13.0.0
2
safeglobal/safe-transaction-service:latest7b576c73f865
pillow@12.3.0
13.0.0
2
ghcr.io/home-assistant/home-assistant:2026.10.2:latest33afb0659d78
pillow@12.3.0
13.0.0
2
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
pillow@12.2.0
13.0.0
2
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
pillow@12.3.0
13.0.0
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
pillow@12.3.0
13.0.0
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
pillow@12.3.0
13.0.0
2
a1ex4/ownfoil:2.5.0123130aad6a2
pillow@12.3.0
13.0.0
1
agentarea/agentarea-mcp-runner:0.1.1:latest066fa4a71695
pillow@12.3.0
13.0.0
1
aibrix/metadata-service:v0.8.058b915e3708d
pillow@12.3.0
13.0.0
1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
pillow@12.3.0
13.0.0
1
allegroai/clearml:2.0.0-613713ae38f7daf
pillow@11.0.0
13.0.0
1
anujdatar/cups:25.07.01685df04a643b
pillow@9.4.0-1.1+deb12u1
no fix listed
1
baserow/backend:2.4.1497347d0ba74
pillow@12.3.0
13.0.0
1
bbilly1/tubearchivist:v0.5.9b827a713f55b
pillow@12.1.0
13.0.0
1
beanbag/reviewboard:latest67113ac4f99a
pillow@12.3.0
13.0.0
1
berkeleyskypilot/skypilot:0.14.125577df35586
pillow@12.3.0
13.0.0
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pillow@12.0.0
13.0.0
1
blackducksoftware/bdba-frontend:2026.9.29d7730e506c0
pillow@12.3.0
13.0.0
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
pillow@7.0.0-4ubuntu0.5
no fix listed
1
bmeares/meerschaum:2.8.48e9c5bacaa82
pillow@11.1.0
13.0.0
1
bnjbvr/kresus:0.22.137e216b182c8
pillow@11.0.0
13.0.0
1
burakince/mlflow:3.16.0ab4b566644b9
pillow@12.3.0
13.0.0
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
pillow@12.3.0
pillow@10.2.0-1ubuntu1.3
13.0.0
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
pillow@12.2.0
13.0.0
1
copyparty/ac:1.19.200a0a8605062c
pillow@11.2.1
13.0.0
1
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
pillow@12.1.0
13.0.0
1
deconzcommunity/deconz:2.29.2062de2362641
pillow@9.4.0-1.1+deb12u1
no fix listed
1
deconzcommunity/deconz:2.26.123c86008d73f
pillow@9.4.0-1.1+b1
no fix listed
1
dpage/pgadmin4:9.11.050700ac17936
pillow@12.0.0
13.0.0
1
dpage/pgadmin4:9.252cb72a9e3da
pillow@11.1.0
13.0.0
1
dpage/pgadmin4:8.13561c1f8f99f2
pillow@11.0.0
13.0.0
1
esphome/esphome:2026.10.03a32372dfbd6
pillow@12.3.0
13.0.0
1
esphome/esphome:2026.9.14ad55931c018
pillow@12.3.0
13.0.0
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
pillow@11.2.1
13.0.0
1
heartexlabs/label-studio:latestafcc516a2277
pillow@12.3.0
13.0.0
1
homeassistant/home-assistant:2026.75a531753cea9
pillow@12.2.0
13.0.0
1
homeassistant/home-assistant:2026.8.0a21689ef0510
pillow@12.3.0
13.0.0
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.