Search for packages
purl | pkg:deb/debian/pillow@9.4.0-1.1%2Bdeb12u1 |
Vulnerability | Summary | Fixed by |
---|---|---|
This package is not known to be affected by vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-bnjc-ytj1-aaaq | The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. |
BIT-2021-23437
BIT-pillow-2021-23437 CVE-2021-23437 GHSA-98vv-pw6r-q6q4 PYSEC-2021-317 SNYK-PYTHON-PILLOW-1319443 |
VCID-frct-6cfh-aaae | Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled. |
BIT-2022-24303
BIT-pillow-2022-24303 CVE-2022-24303 GHSA-9j59-75qj-795w GMS-2022-348 PYSEC-2022-168 |
VCID-rhnd-s6hv-aaar | Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). |
BIT-2022-45198
BIT-pillow-2022-45198 CVE-2022-45198 GHSA-m2vv-5vj5-2hm7 PYSEC-2022-42979 |