CLEANSTART-2026-JZ62126: Pillow is a Python imaging library

Q: What access does an attacker need to exploit this issue?

The supplied CVSS vector indicates network access is sufficient, with low attack complexity. It also indicates that no privileges or user interaction are required.

Q: What is the expected security impact?

The supplied CVSS vector rates availability impact as high. It lists no confidentiality or integrity impact and no scope change.

Q: Can I determine whether my installed package version is affected from this advisory?

No. The provided data identifies cleanstart/apache-superset as the software entry, but does not include affected or fixed version ranges, configuration requirements, or detection guidance.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. Pillow is a Python imaging library.

Affected Software

2 affected componentsFixes available

cleanstart/apache-superset<2021.40.1-r0

2021.40.1-r0

cleanstart/apache-superset<2021.41.0-r0

2021.41.0-r0

Event History

Nov 3, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-112392

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The supplied CVSS vector indicates network access is sufficient, with low attack complexity. It also indicates that no privileges or user interaction are required.

What is the expected security impact?

The supplied CVSS vector rates availability impact as high. It lists no confidentiality or integrity impact and no scope change.

Can I determine whether my installed package version is affected from this advisory?

No. The provided data identifies cleanstart/apache-superset as the software entry, but does not include affected or fixed version ranges, configuration requirements, or detection guidance.

CLEANSTART-2026-JZ62126: Pillow is a Python imaging library

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

Can I determine whether my installed package version is affected from this advisory?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

Can I determine whether my installed package version is affected from this advisory?