Search for packages
Package details: pkg:pypi/pillow@10.1.0
purl pkg:pypi/pillow@10.1.0
Next non-vulnerable version 10.3.0
Latest non-vulnerable version 10.3.0
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-ydt8-c1kr-aaak
Aliases:
CVE-2023-50447
GHSA-3f63-hfp8-52jq
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).
10.2.0
Affected by 1 other vulnerability.
VCID-zbbs-5sps-aaas
Aliases:
CVE-2024-28219
GHSA-44wm-f244-xhp3
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
10.3.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:56:13.571763+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 36.1.3
2025-06-20T16:51:16.973779+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 36.1.3
2025-06-03T23:33:02.760204+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 36.1.0
2025-06-03T23:28:37.380490+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 36.1.0
2025-06-02T23:30:56.582228+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 36.1.2
2025-06-02T23:26:16.436529+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 36.1.2
2025-04-03T22:01:40.285701+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 36.0.0
2025-04-03T21:51:53.662119+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 36.0.0
2025-02-18T03:52:08.935329+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 35.1.0
2025-02-18T03:42:02.353178+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 35.1.0
2024-11-21T01:05:09.573797+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 35.0.0
2024-11-21T00:59:54.800466+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 35.0.0
2024-11-19T00:54:13.846126+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 34.3.2
2024-11-19T00:48:32.674428+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 34.3.2
2024-10-08T01:25:05.673415+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 34.0.2
2024-10-08T01:20:27.390580+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 34.0.2
2024-10-07T22:08:55.146401+00:00 GHSA Importer Affected by VCID-zbbs-5sps-aaas https://github.com/advisories/GHSA-44wm-f244-xhp3 34.0.2
2024-10-07T21:49:12.686689+00:00 GHSA Importer Affected by VCID-ydt8-c1kr-aaak https://github.com/advisories/GHSA-3f63-hfp8-52jq 34.0.2
2024-09-23T01:29:57.498884+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 34.0.1
2024-09-22T22:36:08.767905+00:00 GHSA Importer Affected by VCID-zbbs-5sps-aaas https://github.com/advisories/GHSA-44wm-f244-xhp3 34.0.1
2024-09-22T22:18:32.293914+00:00 GHSA Importer Affected by VCID-ydt8-c1kr-aaak https://github.com/advisories/GHSA-3f63-hfp8-52jq 34.0.1
2024-09-17T22:27:03.668150+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 34.0.1
2024-05-18T00:35:07.744083+00:00 GitLab Importer Affected by VCID-zbbs-5sps-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2024-28219.yml 34.0.0rc4
2024-05-17T21:01:03.798722+00:00 GHSA Importer Affected by VCID-ydt8-c1kr-aaak https://github.com/advisories/GHSA-3f63-hfp8-52jq 34.0.0rc4
2024-04-23T17:43:03.413838+00:00 GitLab Importer Affected by VCID-ydt8-c1kr-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Pillow/CVE-2023-50447.yml 34.0.0rc4