[{"data":1,"prerenderedAt":57},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-112403":3},{"l":4,"details":27,"weitere":35,"indexierbar":55,"updated":56},{"cve":5,"status":6,"vendor":7,"product":8,"name":9,"added":10,"due":9,"ransomware":11,"published":10,"cwes":12,"cvss":14,"epss":19,"slug":22,"bereich":23,"schweregrad":24,"art":25,"produktLabel":26},"CVE-2026-112403","gemeldet","Python","Pillow","","2026-10-19",false,[13],"CWE-122",{"version":15,"score":16,"severity":17,"vector":18},"4.0",9.2,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"score":20,"percentile":21},0.00945,0.61372,"cve-2026-112403","dev","kritisch","Speicherfehler (Heap-Überlauf)","Python Pillow",{"description":28,"refs":29},"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.",[30,33],{"url":31,"host":32},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F242a059aedc1935097d9aa1dc3f099750467ba75","github.com",{"url":34,"host":32},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8g5g-8vmr-9782",[36,44,50],{"cve":37,"status":6,"produktLabel":38,"vendor":39,"product":40,"art":41,"bereich":23,"schweregrad":24,"score":42,"epss":-1,"added":43,"ransomware":11},"CVE-2026-120779","Microsoft Visual Studio Code","Microsoft","Visual Studio Code","Einschleusen von Programmcode (Code Injection)",9.6,"2026-11-10",{"cve":45,"status":6,"produktLabel":46,"vendor":9,"product":46,"art":47,"bereich":23,"schweregrad":24,"score":48,"epss":49,"added":43,"ransomware":11},"CVE-2026-125370","Kubero","Fest eingebauter Schlüssel für die Verschlüsselung",9.3,0.00683,{"cve":51,"status":6,"produktLabel":52,"vendor":9,"product":52,"art":53,"bereich":23,"schweregrad":24,"score":54,"epss":-1,"added":43,"ransomware":11},"CVE-2026-125758","Aptabase","Unsichere Standardeinstellung",9.1,true,"2026-11-12T13:05:11.283Z",1794488744549]