Search for packages
| purl | pkg:deb/debian/pillow@9.4.0-1.1%2Bdeb12u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5fpe-de5a-37ct | The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. |
BIT-pillow-2021-23437
CVE-2021-23437 GHSA-98vv-pw6r-q6q4 PYSEC-2021-317 SNYK-PYTHON-PILLOW-1319443 |
| VCID-9due-xke8-vqgt | Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled. |
BIT-pillow-2022-24303
CVE-2022-24303 GHSA-9j59-75qj-795w GMS-2022-348 PYSEC-2022-168 |
| VCID-jgwx-yhhb-6yft | Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). |
BIT-pillow-2022-45198
CVE-2022-45198 GHSA-m2vv-5vj5-2hm7 PYSEC-2022-42979 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T13:21:50.607996+00:00 | Debian Importer | Fixing | VCID-5fpe-de5a-37ct | https://security-tracker.debian.org/tracker/data/json | 37.0.0 |
| 2025-08-01T12:37:11.891666+00:00 | Debian Importer | Fixing | VCID-jgwx-yhhb-6yft | https://security-tracker.debian.org/tracker/data/json | 37.0.0 |
| 2025-08-01T12:33:49.327332+00:00 | Debian Importer | Fixing | VCID-9due-xke8-vqgt | https://security-tracker.debian.org/tracker/data/json | 37.0.0 |