Search for packages
| purl | pkg:pypi/pil@0.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-r5ua-w32z-aaag
Aliases: CVE-2014-3589 GHSA-cfmr-38g9-f2h7 PYSEC-2014-10 |
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:29:50.692069+00:00 | GitLab Importer | Affected by | VCID-r5ua-w32z-aaag | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/PIL/CVE-2014-3589.yml | 34.0.1 |
| 2024-01-03T17:55:01.817733+00:00 | GitLab Importer | Affected by | VCID-r5ua-w32z-aaag | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/PIL/CVE-2014-3589.yml | 34.0.0rc1 |