Pillow PDF parser recursion flaw bypasses CVE-2026-42310 fix
1. Executive summary A new Pillow vulnerability, tracked as CVE-2026-42310 at CVSS 5.1 MEDIUM (NVD), allows a crafted PDF to drive two recursive
20 Oct 2026 · 6 min read
read →