Search for packages
| purl | pkg:deb/debian/pillow@9.0.0-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-df4x-jt3h-17hx | path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. |
BIT-pillow-2022-22816
CVE-2022-22816 GHSA-xrcv-f9gm-v42c PYSEC-2022-9 |
| VCID-dpc3-td9q-dyee | path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. |
BIT-pillow-2022-22815
CVE-2022-22815 GHSA-pw3c-h7wp-cvhx PYSEC-2022-8 |
| VCID-q4bb-qnxe-8bfa | PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. |
BIT-pillow-2022-22817
CVE-2022-22817 GHSA-8vj2-vxx3-667w PYSEC-2022-10 |