CVE-2026-112400 - Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
CVE ID :CVE-2026-112400 Published : Oct. 19, 2026, 10:17 p.m. | 1 hour, 48 minutes ago Description :Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave...