Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

影響: pip:Pillow >= 2.3.0, <= 12.3.0 → 13.0.0

============================================================================ EPS load(scale) lets Ghostscript render past the decompression bomb limit Location: src/PIL/EpsImagePlugin.py:92 in Ghostscript() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ When an application opens an untrusted Encapsulated PostScript file and asks Pillow to render it at a larger scale, Pillow has Ghostscript produce an image several ti…

GitHub Advisory Databaseで読む

2026/10/21 05:53、GitHub Advisory Databaseが「Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「警告」(medium) です。関連する技術: Python。CVE: CVE-2026-112899。