高危漏洞公告Python2026/10/22 06:11

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

影響: pip:Pillow >= 5.1.0, < 13.0.0 → 13.0.0

============================================================================ Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) Location: src/PIL/PdfParser.py:629 in next_object_id() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ Pillow's PDF writer takes time proportional to the square of the number of frames when it saves a multi-frame image as a multi-page PDF. Anyone who can get an application to conve…

在 GitHub Advisory Database 阅读

CVE	CVE-2026-112894
来源	GitHub Advisory Database
获取时间	2026/10/22 06:12
数据	Markdown　JSON

2026/10/22 06:11，GitHub Advisory Database 发布了“Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：Python。CVE：CVE-2026-112894。