Security1 hOctober 25, 2026, 00:12

Pillow: 60 advisories in a year and why avatar.png opens as a PSD

Pillow picks a decoder from the file's first bytes, not its extension, so a PSD renamed avatar.png opens as a Photoshop document. The library shipped 60 advisories in 2026, 39 of them on 20–22 October; the formats= allowlist blocks 18 of 24 open-an-upload bugs but not the critical JPEG and MPO ones.

DEV Community

Open source

39 of Pillow's 60 advisories landed in three days, 20–22 October 2026
The formats= allowlist blocks 18 of 24 bugs reachable by opening an upload
Critical JPEG and MPO bugs bypass it; MPO is registered inside the JPEG plugin
Django's ImageField and popular thumbnailers call Image.open without formats=

#Pillow#Django

Sentry raises open source maintainer funding to $1 million

Security

Average router firmware runs open-source code over five years old

Security

Dependabot is a month late on Python and Go CVEs

Security

Pillow: 60 advisories in a year and why avatar.png opens as a PSD

Sentry raises open source maintainer funding to $1 million

Average router firmware runs open-source code over five years old

Dependabot is a month late on Python and Go CVEs

Pillow libopenjp2 heap overflow found in JPEG 2000 parsing