높음취약점 권고Python2026. 10. 21. 오전 05:53

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

影響: pip:Pillow >= 9.2.0, < 13.0.0 → 13.0.0

============================================================================ GIF seek keeps rejected size after DecompressionBombError, allowing DoS Location: src/PIL/GifImagePlugin.py:293 in GifImageFile._seek() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ A GIF of about 60 bytes can make Pillow allocate gigabytes of memory. This affects applications that catch the "image too large" error raised while stepping to…

GitHub Advisory Database에서 읽기

CVE	CVE-2026-112400
정보원	GitHub Advisory Database
수집 시각	2026. 10. 22. 오전 01:17
데이터	Markdown　JSON

2026. 10. 21. 오전 05:53, GitHub Advisory Database에서 "Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python. CVE: CVE-2026-112400.