Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/py3-pillow@6.2.2-r0?arch=s390x&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/py3-pillow@6.2.2-r0?arch=s390x&distroversion=v3.15&reponame=main
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-b3au-rcgp-2fag There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer. CVE-2019-19911
GHSA-5gm3-px64-rw72
PYSEC-2020-172
VCID-hmmq-5772-bycm libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. BIT-pillow-2020-5313
CVE-2020-5313
GHSA-hj69-c76v-86wr
PYSEC-2020-84
VCID-m3tm-h4q9-9yay libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. BIT-pillow-2020-5311
CVE-2020-5311
GHSA-r7rm-8j6h-r933
PYSEC-2020-82
VCID-sns1-ksqr-vbhr libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. BIT-pillow-2020-5312
CVE-2020-5312
GHSA-p49h-hjvm-jg3h
PYSEC-2020-83
VCID-stft-hsk9-zfdy libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. BIT-pillow-2020-5310
CVE-2020-5310
GHSA-vcqg-3p29-xw73
PYSEC-2020-81

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-06T04:53:49.207404+00:00 Alpine Linux Importer Fixing VCID-m3tm-h4q9-9yay https://secdb.alpinelinux.org/v3.15/main.json 38.1.0
2026-04-03T17:52:23.364570+00:00 Alpine Linux Importer Fixing VCID-b3au-rcgp-2fag https://secdb.alpinelinux.org/v3.15/main.json 38.1.0
2026-04-01T19:29:41.186181+00:00 Alpine Linux Importer Fixing VCID-stft-hsk9-zfdy https://secdb.alpinelinux.org/v3.15/main.json 38.0.0
2026-04-01T19:13:31.103420+00:00 Alpine Linux Importer Fixing VCID-hmmq-5772-bycm https://secdb.alpinelinux.org/v3.15/main.json 38.0.0
2026-04-01T18:51:06.054454+00:00 Alpine Linux Importer Fixing VCID-sns1-ksqr-vbhr https://secdb.alpinelinux.org/v3.15/main.json 38.0.0