Skip to content

[11.1.x] Backport CVE-2026-40192: Only read as much data from gzip-decompressed data as necessary (#9521) - #9613

Closed
vulgraph wants to merge 1 commit into
python-pillow:11.1.xfrom
vulgraph:backport/CVE-2026-40192-11.1.x
Closed

vulgraph wants to merge 1 commit into
python-pillow:11.1.xfrom
vulgraph:backport/CVE-2026-40192-11.1.x

Commits

  1. Commits on May 3, 2026