Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/pillow@10.0.0-1?distro=trixie
purl pkg:deb/debian/pillow@10.0.0-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-n1hp-atex-ubh4 An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument. BIT-pillow-2023-44271
CVE-2023-44271
GHSA-8ghj-p4vj-mr35
PYSEC-2023-227

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:18:12.683751+00:00 Debian Importer Fixing VCID-n1hp-atex-ubh4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:56:03.501561+00:00 Debian Importer Fixing VCID-n1hp-atex-ubh4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:03.286455+00:00 Debian Importer Fixing VCID-n1hp-atex-ubh4 https://security-tracker.debian.org/tracker/data/json 38.1.0