CVE-2026-112405 Blast Radius

HIGH • CVSS 8.7Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first i…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-112405.

Book a Demo →← Back to CVE-2026-112405