Pillow (PyPI)
Advisories
217
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 13.0.0 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "Pillow>=13.0.0"poetry
poetry add "Pillow>=13.0.0"uv
uv add "Pillow>=13.0.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-78g4-xqwv-q3g8 Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load() |
High | >= 11.1.0, < 13.0.0 | 13.0.0 |
| GHSA-654x-cwwv-5j9c Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 |
Medium EPSS 0.37% |
>= 11.2.1, < 13.0.0 | 13.0.0 |
| GHSA-654x-cwwv-5j9c Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 |
Medium EPSS 0.37% |
>= 11.2.1, < 13.0.0 | 13.0.0 |
| GHSA-xvh5-g6gv-559v Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags |
High | < 13.0.0 | 13.0.0 |
| GHSA-g7cr-3p24-7wf7 Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer |
High EPSS 0.45% |
>= 9.4.0, < 13.0.0 | 13.0.0 |
| GHSA-9v9v-9qvf-h2hj Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) |
High EPSS 0.38% |
< 13.0.0 | 13.0.0 |
| GHSA-9v9v-9qvf-h2hj Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) |
High EPSS 0.38% |
< 13.0.0 | 13.0.0 |
| GHSA-g4qv-2jxx-769h Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time |
Medium EPSS 0.37% |
>= 11.0.0, < 13.0.0 | 13.0.0 |
| GHSA-g4qv-2jxx-769h Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time |
Medium EPSS 0.37% |
>= 11.0.0, < 13.0.0 | 13.0.0 |
| GHSA-3j72-p6qg-6xp7 Pillow: TarIO negative size field causes infinite CPU-spin loop |
Medium EPSS 0.34% |
< 13.0.0 | 13.0.0 |
| GHSA-3j72-p6qg-6xp7 Pillow: TarIO negative size field causes infinite CPU-spin loop |
Medium EPSS 0.34% |
< 13.0.0 | 13.0.0 |
| GHSA-4rm8-3hmm-39fg Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise |
Medium EPSS 0.34% |
< 13.0.0 | 13.0.0 |
| GHSA-4rm8-3hmm-39fg Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise |
Medium EPSS 0.34% |
< 13.0.0 | 13.0.0 |
| GHSA-mrfp-p49p-3hf2 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion |
High EPSS 0.60% |
>= 5.1.0, < 13.0.0 | 13.0.0 |
| GHSA-v9pv-5gc8-w2m6 Pillow multi-frame loaders can reuse stale native image storage after mode transitions |
Critical EPSS 0.66% |
>= 11.0.0, < 13.0.0 | 13.0.0 |
| GHSA-v9pv-5gc8-w2m6 Pillow multi-frame loaders can reuse stale native image storage after mode transitions |
Critical EPSS 0.66% |
>= 11.0.0, < 13.0.0 | 13.0.0 |
| GHSA-24rc-8hj2-v98c Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode |
Medium EPSS 0.34% |
>= 9.1.0, < 13.0.0 | 13.0.0 |
| GHSA-g842-9rc4-69pw Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS |
Medium EPSS 0.37% |
< 13.0.0 | 13.0.0 |
| GHSA-g842-9rc4-69pw Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS |
Medium EPSS 0.37% |
< 13.0.0 | 13.0.0 |
| GHSA-p8hx-v2p6-rp84 Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) |
Medium EPSS 0.34% |
< 13.0.0 | 13.0.0 |
| GHSA-p8hx-v2p6-rp84 Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) |
Medium EPSS 0.34% |
< 13.0.0 | 13.0.0 |
| GHSA-vx6w-vv9f-6gvg Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit |
Medium | >= 2.3.0, < 13.0.0 | 13.0.0 |
| GHSA-xgh8-jp6q-p5x8 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes |
High EPSS 0.53% |
< 13.0.0 | 13.0.0 |
| GHSA-xgh8-jp6q-p5x8 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes |
High EPSS 0.53% |
< 13.0.0 | 13.0.0 |
| GHSA-w889-685w-c8fh Pillow: Argument Injection in Ghostscript call, potentially leading into RCE |
Critical EPSS 1.30% |
>= 2.6.0, < 13.0.0 | 13.0.0 |
| GHSA-rfgq-q3w2-pmv2 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory |
Medium EPSS 0.34% |
>= 9.1.0, < 13.0.0 | 13.0.0 |
| GHSA-q45j-58j2-45rg Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips |
Medium EPSS 0.48% |
>= 5.3.0, < 13.0.0 | 13.0.0 |
| GHSA-pchr-8j38-3x4p Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read |
High EPSS 0.47% |
< 13.0.0 | 13.0.0 |
| GHSA-pchr-8j38-3x4p Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read |
High EPSS 0.47% |
< 13.0.0 | 13.0.0 |
| GHSA-p4wg-p73j-c528 Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310) |
High EPSS 0.59% |
>= 5.1.0, < 13.0.0 | 13.0.0 |
| GHSA-jg86-v3jv-hrpm Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) |
High EPSS 0.59% |
>= 5.1.0, < 13.0.0 | 13.0.0 |
| GHSA-j4m9-6w36-pw47 Pillow: Invalid free in FreeType glyph rendering when a stroker is active |
High EPSS 0.55% |
>= 10.0.0, < 13.0.0 | 13.0.0 |
| GHSA-gg2r-wvfm-q9rx Pillow: MSP RLE decoder expands a tiny file into unbounded memory |
High EPSS 0.50% |
>= 4.1.0, < 13.0.0 | 13.0.0 |
| GHSA-fc9g-5qg7-mf45 Pillow: Quadratic GIF comment copying during save |
High EPSS 0.55% |
>= 9.2.0, < 13.0.0 | 13.0.0 |
| GHSA-f2g6-542v-9j58 Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle |
High EPSS 0.57% |
>= 5.1.0, < 13.0.0 | 13.0.0 |
| GHSA-cp9v-662q-vvx9 Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 |
High EPSS 0.59% |
>= 12.0.0, < 13.0.0 | 13.0.0 |
| GHSA-cp9v-662q-vvx9 Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 |
High EPSS 0.59% |
>= 12.0.0, < 13.0.0 | 13.0.0 |
| GHSA-c6hw-5grf-ff96 Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels |
High EPSS 0.44% |
>= 8.1.0, < 13.0.0 | 13.0.0 |
| GHSA-8g5g-8vmr-9782 Pillow: Heap buffer overflow in ImagingJpegDecode |
Critical EPSS 0.95% |
< 13.0.0 | 13.0.0 |
| GHSA-8g5g-8vmr-9782 Pillow: Heap buffer overflow in ImagingJpegDecode |
Critical EPSS 0.95% |
< 13.0.0 | 13.0.0 |
| GHSA-7mwm-ghpf-9vrm Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform |
High EPSS 0.59% |
< 13.0.0 | 13.0.0 |
| GHSA-7mwm-ghpf-9vrm Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform |
High EPSS 0.59% |
< 13.0.0 | 13.0.0 |
| GHSA-74r2-7ff9-mjj2 Pillow: Quadratic GIF comment concatenation allows DoS in Image.open() |
High EPSS 0.65% |
>= 5.4.0, < 13.0.0 | 13.0.0 |
| GHSA-65qm-jvmh-6pqg Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS |
High EPSS 0.59% |
>= 9.2.0, < 13.0.0 | 13.0.0 |
| GHSA-5xm2-6676-qcp9 Pillow: APNG background disposal allocates full canvas before decompression bomb check |
High EPSS 0.53% |
>= 8.1.0, < 13.0.0 | 13.0.0 |
| GHSA-5x8w-8jj5-q52h Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution |
Critical EPSS 0.70% |
< 13.0.0 | 13.0.0 |
| GHSA-5x8w-8jj5-q52h Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution |
Critical EPSS 0.70% |
< 13.0.0 | 13.0.0 |
| GHSA-58r4-6rv3-gfh8 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image |
High EPSS 0.57% |
< 13.0.0 | 13.0.0 |
| GHSA-58r4-6rv3-gfh8 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image |
High EPSS 0.57% |
< 13.0.0 | 13.0.0 |
| GHSA-4rr5-89j8-mwwm Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer |
High EPSS 0.69% |
>= 11.3.0, < 13.0.0 | 13.0.0 |
| GHSA-4rr5-89j8-mwwm Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer |
High EPSS 0.69% |
>= 11.3.0, < 13.0.0 | 13.0.0 |
| GHSA-27h8-gf7j-v5hc Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images |
High EPSS 0.59% |
< 13.0.0 | 13.0.0 |
| GHSA-27h8-gf7j-v5hc Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images |
High EPSS 0.59% |
< 13.0.0 | 13.0.0 |
| GHSA-462x-pgg6-55fp Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290) |
High EPSS 0.51% |
>= 8.2.0, < 13.0.0 | 13.0.0 |
| GHSA-4558-3h8r-v8xp Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size |
High EPSS 0.56% |
< 13.0.0 | 13.0.0 |
| GHSA-4558-3h8r-v8xp Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size |
High EPSS 0.56% |
< 13.0.0 | 13.0.0 |
| GHSA-332p-7hrc-92wf Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO |
Critical EPSS 1.02% |
>= 2.0.0, < 13.0.0 | 13.0.0 |
| GHSA-254f-3936-288h Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree() |
High EPSS 0.58% |
>= 5.1.0, < 13.0.0 | 13.0.0 |
| GHSA-22hg-r758-rrw9 Pillow: Infinite loop in MIC n_frames when the embedded TIFF |
High EPSS 0.59% |
>= 7.2.0, < 13.0.0 | 13.0.0 |
| GHSA-jjj6-mw9f-p565 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() |
High EPSS 0.39% |
>= 5.1.0, < 12.3.0 | 12.3.0 |
| GHSA-jjj6-mw9f-p565 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() |
High EPSS 0.39% |
>= 5.1.0, < 12.3.0 | 12.3.0 |
| GHSA-xj96-63gp-2gmr Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` |
High EPSS 0.45% |
< 12.3.0 | 12.3.0 |
| GHSA-xj96-63gp-2gmr Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` |
High EPSS 0.45% |
< 12.3.0 | 12.3.0 |
| GHSA-62p4-gmf7-7g93 Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) |
Critical EPSS 0.52% |
< 12.3.0 | 12.3.0 |
| GHSA-62p4-gmf7-7g93 Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) |
Critical EPSS 0.52% |
< 12.3.0 | 12.3.0 |
| GHSA-9hw9-ch79-4vh6 Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch |
High EPSS 0.39% |
< 12.3.0 | 12.3.0 |
| GHSA-9hw9-ch79-4vh6 Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch |
High EPSS 0.39% |
< 12.3.0 | 12.3.0 |
| GHSA-vjc4-5qp5-m44j Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service |
High EPSS 0.39% |
>= 8.2.0, < 12.3.0 | 12.3.0 |
| GHSA-vjc4-5qp5-m44j Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service |
High EPSS 0.39% |
>= 8.2.0, < 12.3.0 | 12.3.0 |
| GHSA-pg7v-jwj7-p798 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service |
High EPSS 0.40% |
>= 12.0.0, < 12.3.0 | 12.3.0 |
| GHSA-pg7v-jwj7-p798 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service |
High EPSS 0.40% |
>= 12.0.0, < 12.3.0 | 12.3.0 |
| GHSA-6r8x-57c9-28j4 Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow |
High EPSS 0.39% |
< 12.3.0 | 12.3.0 |
| GHSA-6r8x-57c9-28j4 Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow |
High EPSS 0.39% |
< 12.3.0 | 12.3.0 |
| GHSA-fj7v-r99m-22gq Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images |
High EPSS 0.31% |
>= 5.2.0, < 12.3.0 | 12.3.0 |
| GHSA-fj7v-r99m-22gq Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images |
High EPSS 0.31% |
>= 5.2.0, < 12.3.0 | 12.3.0 |
| GHSA-4x4j-2g7c-83w6 Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path |
Medium EPSS 0.18% |
< 12.3.0 | 12.3.0 |
| GHSA-4x4j-2g7c-83w6 Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path |
Medium EPSS 0.18% |
< 12.3.0 | 12.3.0 |
| GHSA-phj9-mv4w-65pm Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()` |
High EPSS 0.52% |
< 12.3.0 | 12.3.0 |
| GHSA-phj9-mv4w-65pm Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()` |
High EPSS 0.52% |
< 12.3.0 | 12.3.0 |
| GHSA-45hq-cxwh-f6vc Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading |
High EPSS 0.52% |
< 12.3.0 | 12.3.0 |
| GHSA-45hq-cxwh-f6vc Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading |
High EPSS 0.52% |
< 12.3.0 | 12.3.0 |
| GHSA-5x94-69rx-g8h2 Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` |
High EPSS 0.42% |
< 12.3.0 | 12.3.0 |
| GHSA-5x94-69rx-g8h2 Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` |
High EPSS 0.42% |
< 12.3.0 | 12.3.0 |
| GHSA-8v84-f9pq-wr9x Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading |
High EPSS 0.41% |
< 12.3.0 | 12.3.0 |
| GHSA-8v84-f9pq-wr9x Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading |
High EPSS 0.41% |
< 12.3.0 | 12.3.0 |
| GHSA-pwv6-vv43-88gr Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow) |
High EPSS 0.15% |
>= 10.3.0, < 12.2.0 | 12.2.0 |
| GHSA-pwv6-vv43-88gr Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow) |
High EPSS 0.15% |
>= 10.3.0, < 12.2.0 | 12.2.0 |
| GHSA-r73j-pqj5-w3x7 Pillow has a PDF Parsing Trailer Infinite Loop (DoS) |
Medium EPSS 0.17% |
>= 4.2.0, < 12.2.0 | 12.2.0 |
| GHSA-r73j-pqj5-w3x7 Pillow has a PDF Parsing Trailer Infinite Loop (DoS) |
Medium EPSS 0.17% |
>= 4.2.0, < 12.2.0 | 12.2.0 |
| GHSA-wjx4-4jcj-g98j Pillow has an integer overflow when processing fonts |
Medium EPSS 0.11% |
< 12.2.0 | 12.2.0 |
| GHSA-wjx4-4jcj-g98j Pillow has an integer overflow when processing fonts |
Medium EPSS 0.11% |
< 12.2.0 | 12.2.0 |
| GHSA-5xmw-vc9v-4wf2 Pillow has a heap buffer overflow with nested list coordinates |
Medium EPSS 0.13% |
>= 11.2.1, < 12.2.0 | 12.2.0 |
| GHSA-5xmw-vc9v-4wf2 Pillow has a heap buffer overflow with nested list coordinates |
Medium EPSS 0.13% |
>= 11.2.1, < 12.2.0 | 12.2.0 |
| GHSA-whj4-6x5x-4v2j FITS GZIP decompression bomb in Pillow |
High EPSS 0.67% |
>= 10.3.0, < 12.2.0 | 12.2.0 |
| GHSA-whj4-6x5x-4v2j FITS GZIP decompression bomb in Pillow |
High EPSS 0.67% |
>= 10.3.0, < 12.2.0 | 12.2.0 |
| GHSA-cfh3-3jmp-rvhc Pillow affected by out-of-bounds write when loading PSD images |
High EPSS 0.41% |
>= 10.3.0, < 12.1.1 | 12.1.1 |
| GHSA-cfh3-3jmp-rvhc Pillow affected by out-of-bounds write when loading PSD images |
High EPSS 0.41% |
>= 10.3.0, < 12.1.1 | 12.1.1 |
| GHSA-xg8h-j46f-w952 Pillow vulnerability can cause write buffer overflow on BCn encoding |
Medium EPSS 0.32% |
>= 11.2.0, < 11.3.0 | 11.3.0 |
| GHSA-xg8h-j46f-w952 Pillow vulnerability can cause write buffer overflow on BCn encoding |
Medium EPSS 0.32% |
>= 11.2.0, < 11.3.0 | 11.3.0 |
| GHSA-44wm-f244-xhp3 Pillow buffer overflow vulnerability |
Medium EPSS 1.00% |
< 10.3.0 | 10.3.0 |
| GHSA-44wm-f244-xhp3 Pillow buffer overflow vulnerability |
Medium EPSS 1.00% |
< 10.3.0 | 10.3.0 |
| GHSA-3f63-hfp8-52jq Arbitrary Code Execution in Pillow |
High EPSS 1.70% |
< 10.2.0 | 10.2.0 |
| GHSA-3f63-hfp8-52jq Arbitrary Code Execution in Pillow |
High EPSS 1.70% |
< 10.2.0 | 10.2.0 |
| GHSA-8ghj-p4vj-mr35 Pillow Denial of Service vulnerability |
High EPSS 1.35% |
< 10.0.0 | 10.0.0 |
| GHSA-8ghj-p4vj-mr35 Pillow Denial of Service vulnerability |
High EPSS 1.35% |
< 10.0.0 | 10.0.0 |
| GHSA-56pw-mpj4-fxww Duplicate Advisory: Bundled libwebp in Pillow vulnerable Withdrawn |
High | < 10.0.1 | 10.0.1 |
| PYSEC-2023-175 Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Known exploited |
High EPSS 99.98% |
< 10.0.1 | 10.0.1 |
| GHSA-j7hp-h8jx-5ppr libwebp: OOB write in BuildHuffmanTable Known exploited |
High EPSS 99.98% |
< 10.0.1 | 10.0.1 |
| GHSA-j7hp-h8jx-5ppr libwebp: OOB write in BuildHuffmanTable Known exploited |
High EPSS 99.98% |
< 10.0.1 | 10.0.1 |
| GHSA-j7hp-h8jx-5ppr libwebp: OOB write in BuildHuffmanTable Known exploited |
High EPSS 99.98% |
< 10.0.1 | 10.0.1 |
| GHSA-m2vv-5vj5-2hm7 Pillow vulnerable to Data Amplification attack. |
High EPSS 1.30% |
< 9.2.0 | 9.2.0 |
| GHSA-m2vv-5vj5-2hm7 Pillow vulnerable to Data Amplification attack. |
High EPSS 1.30% |
< 9.2.0 | 9.2.0 |
| GHSA-q4mp-jvh2-76fj Pillow subject to DoS via SAMPLESPERPIXEL tag |
High EPSS 1.21% |
>= 9.2.0, < 9.3.0 | 9.3.0 |
| GHSA-q4mp-jvh2-76fj Pillow subject to DoS via SAMPLESPERPIXEL tag |
High EPSS 1.21% |
>= 9.2.0, < 9.3.0 | 9.3.0 |
| OSV-2022-1074 Invalid-free in _dealloc |
Not rated yet | No fix yet | |
| OSV-2022-715 Segv on unknown address in jpeg_read_scanlines |
Not rated yet | No fix yet | |
| GHSA-hr8g-f6r6-mr22 Buffer over-flow in Pillow |
High EPSS 2.33% |
>= 9.1.0, < 9.1.1 | 9.1.1 |
| GHSA-hr8g-f6r6-mr22 Buffer over-flow in Pillow |
High EPSS 2.33% |
>= 9.1.0, < 9.1.1 | 9.1.1 |
| GHSA-4fx9-vc88-q2xc Infinite loop in Pillow |
Low | < 9.0.0 | 9.0.0 |
| GHSA-9j59-75qj-795w Path traversal in Pillow |
Critical EPSS 2.69% |
< 9.0.1 | 9.0.1 |
| GHSA-9j59-75qj-795w Path traversal in Pillow |
Critical EPSS 2.69% |
< 9.0.1 | 9.0.1 |
| GHSA-pw3c-h7wp-cvhx Improper Initialization in Pillow |
Medium EPSS 2.77% |
< 9.0.0 | 9.0.0 |
| GHSA-8vj2-vxx3-667w Arbitrary expression injection in Pillow |
Critical EPSS 3.58% |
< 9.0.1 | 9.0.1 |
| GHSA-8vj2-vxx3-667w Arbitrary expression injection in Pillow |
Critical EPSS 3.58% |
< 9.0.0 | 9.0.0 |
| GHSA-pw3c-h7wp-cvhx Improper Initialization in Pillow |
Medium EPSS 2.77% |
< 9.0.0 | 9.0.0 |
| GHSA-xrcv-f9gm-v42c Out-of-bounds Read in Pillow |
Medium EPSS 2.06% |
< 9.0.0 | 9.0.0 |
| GHSA-xrcv-f9gm-v42c Out-of-bounds Read in Pillow |
Medium EPSS 2.06% |
< 9.0.0 | 9.0.0 |
| GHSA-98vv-pw6r-q6q4 Uncontrolled Resource Consumption in pillow |
High EPSS 3.24% |
< 8.3.2 | 8.3.2 |
| GHSA-98vv-pw6r-q6q4 Uncontrolled Resource Consumption in pillow |
High EPSS 3.24% |
>= 5.2.0, < 8.3.2 | 8.3.2 |
| GHSA-7534-mm45-c74v Buffer Overflow in Pillow |
Critical EPSS 3.19% |
< 8.3.0 | 8.3.0 |
| GHSA-7534-mm45-c74v Buffer Overflow in Pillow |
Critical EPSS 3.19% |
< 8.3.0 | 8.3.0 |
| GHSA-q5hq-fp76-qmrc Uncontrolled Resource Consumption in Pillow |
High EPSS 2.47% |
< 8.2.0 | 8.2.0 |
| GHSA-rwv7-3v45-hg29 Pillow Out-of-bounds Read vulnerability |
Critical EPSS 2.39% |
>= 2.4.0, < 8.2.0 | 8.2.0 |
| GHSA-rwv7-3v45-hg29 Pillow Out-of-bounds Read vulnerability |
Critical EPSS 2.39% |
< 8.2.0 | 8.2.0 |
| GHSA-77gc-v2xv-rvvh Out-of-bounds Read in Pillow |
Critical EPSS 2.93% |
>= 2.4.0, < 8.2.0 | 8.2.0 |
| GHSA-77gc-v2xv-rvvh Out-of-bounds Read in Pillow |
Critical EPSS 2.93% |
< 8.2.0 | 8.2.0 |
| GHSA-7r7m-5h27-29hp Potential infinite loop in Pillow |
High EPSS 2.50% |
< 8.2.0 | 8.2.0 |
| GHSA-7r7m-5h27-29hp Potential infinite loop in Pillow |
High EPSS 2.50% |
< 8.2.0 | 8.2.0 |
| GHSA-hjfx-8p6c-g7gx Insufficient Verification of Data Authenticity in Pillow |
Medium EPSS 0.73% |
< 8.2.0 | 8.2.0 |
| GHSA-hjfx-8p6c-g7gx Insufficient Verification of Data Authenticity in Pillow |
Medium EPSS 0.73% |
>= 5.1.0, < 8.2.0 | 8.2.0 |
| GHSA-q5hq-fp76-qmrc Uncontrolled Resource Consumption in Pillow |
High EPSS 2.47% |
< 8.2.0 | 8.2.0 |
| GHSA-g6rj-rv7j-xwp4 Pillow denial of service |
Medium EPSS 0.96% |
< 8.2.0 | 8.2.0 |
| GHSA-g6rj-rv7j-xwp4 Pillow denial of service |
Medium EPSS 0.96% |
< 8.2.0 | 8.2.0 |
| GHSA-jgpv-4h4c-xhw3 Duplicate Advisory: Uncontrolled Resource Consumption in pillow Withdrawn |
High | < 8.1.2 | 8.1.2 |
| GHSA-9hx2-hgq2-2g4f Regular Expression Denial of Service (ReDoS) in Pillow |
Medium EPSS 1.73% |
>= 5.1.0, < 8.1.1 | 8.1.1 |
| GHSA-9hx2-hgq2-2g4f Regular Expression Denial of Service (ReDoS) in Pillow |
Medium EPSS 1.73% |
< 8.1.1 | 8.1.1 |
| GHSA-p43w-g3c5-g5mq Out of bounds read in Pillow |
High EPSS 1.60% |
< 8.1.1 | 8.1.1 |
| GHSA-8xjq-8fcg-g5hw Out-of-bounds Write in Pillow |
High EPSS 2.37% |
< 8.1.1 | 8.1.1 |
| GHSA-8xjq-8fcg-g5hw Out-of-bounds Write in Pillow |
High EPSS 2.37% |
< 8.1.1 | 8.1.1 |
| GHSA-mvg9-xffr-p774 Out of bounds read in Pillow |
High EPSS 1.40% |
< 8.2.0 | 8.2.0 |
| GHSA-p43w-g3c5-g5mq Out of bounds read in Pillow |
High EPSS 1.60% |
>= 4.3.0, < 8.1.1 | 8.1.1 |
| GHSA-57h3-9rgr-c24m Out of bounds write in Pillow |
Critical EPSS 2.34% |
< 8.1.1 | 8.1.1 |
| GHSA-57h3-9rgr-c24m Out of bounds write in Pillow |
Critical EPSS 2.34% |
< 8.1.1 | 8.1.1 |
| GHSA-mvg9-xffr-p774 Out of bounds read in Pillow |
High EPSS 1.40% |
< 8.1.1 | 8.1.1 |
| GHSA-3wvg-mj6g-m9cv Pillow Uncontrolled Resource Consumption |
High EPSS 4.85% |
< 8.1.1 | 8.1.1 |
| GHSA-95q3-8gr9-gm8w Pillow Denial of Service by Uncontrolled Resource Consumption |
High EPSS 3.04% |
< 8.1.2 | 8.1.2 |
| GHSA-95q3-8gr9-gm8w Pillow Denial of Service by Uncontrolled Resource Consumption |
High EPSS 3.04% |
< 8.1.1 | 8.1.1 |
| GHSA-f4w8-cv6p-x6r5 Pillow Denial of Service by Uncontrolled Resource Consumption |
High EPSS 3.17% |
< 8.1.2 | 8.1.2 |
| GHSA-f4w8-cv6p-x6r5 Pillow Denial of Service by Uncontrolled Resource Consumption |
High EPSS 3.17% |
< 8.1.1 | 8.1.1 |
| GHSA-3wvg-mj6g-m9cv Pillow Uncontrolled Resource Consumption |
High EPSS 4.85% |
< 8.1.2 | 8.1.2 |
| GHSA-hf64-x4gq-p99h Pillow Out-of-bounds Read |
Medium EPSS 1.66% |
>= 4.3.0, < 8.1.0 | 8.1.0 |
| GHSA-hf64-x4gq-p99h Pillow Out-of-bounds Read |
Medium EPSS 1.66% |
>= 4.3.0, < 8.1.0 | 8.1.0 |
| GHSA-f5g8-5qq7-938w Pillow Out-of-bounds Read |
High EPSS 1.64% |
< 8.1.0 | 8.1.0 |
| GHSA-f5g8-5qq7-938w Pillow Out-of-bounds Read |
High EPSS 1.64% |
< 8.1.0 | 8.1.0 |
| GHSA-vqcj-wrf2-7v73 Pillow Out-of-bounds Write |
High EPSS 1.87% |
< 8.1.0 | 8.1.0 |
| GHSA-vqcj-wrf2-7v73 Pillow Out-of-bounds Write |
High EPSS 1.87% |
< 8.1.0 | 8.1.0 |
| GHSA-cqhg-xjhh-p8hf Out-of-bounds reads in Pillow |
Medium EPSS 1.48% |
< 7.1.0 | 7.1.0 |
| GHSA-43fq-w8qq-v88h Out-of-bounds read in Pillow |
High EPSS 2.51% |
< 7.1.0 | 7.1.0 |
| GHSA-3xv8-3j54-hgrp Out-of-bounds read in Pillow |
Medium EPSS 1.11% |
< 7.1.0 | 7.1.0 |
| GHSA-vj42-xq3r-hr3r Out-of-bounds reads in Pillow |
Medium EPSS 1.43% |
< 7.1.0 | 7.1.0 |
| GHSA-43fq-w8qq-v88h Out-of-bounds read in Pillow |
High EPSS 2.51% |
< 7.1.0 | 7.1.0 |
| GHSA-3xv8-3j54-hgrp Out-of-bounds read in Pillow |
Medium EPSS 1.11% |
< 7.1.0 | 7.1.0 |
| GHSA-vj42-xq3r-hr3r Out-of-bounds reads in Pillow |
Medium EPSS 1.43% |
< 7.0.0 | 7.0.0 |
| GHSA-8843-m7mw-mxqm Buffer overflow in Pillow |
High EPSS 1.13% |
< 7.1.0 | 7.1.0 |
| GHSA-8843-m7mw-mxqm Buffer overflow in Pillow |
High EPSS 1.13% |
< 7.1.0 | 7.1.0 |
| GHSA-cqhg-xjhh-p8hf Out-of-bounds reads in Pillow |
Medium EPSS 1.48% |
< 7.1.0 | 7.1.0 |
| PYSEC-2020-191 There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of… Withdrawn |
Not rated yet | < 6.2.2 | 6.2.2 |
| GHSA-5gm3-px64-rw72 Uncontrolled Resource Consumption in Pillow |
High EPSS 2.24% |
< 6.2.2 | 6.2.2 |
| GHSA-5gm3-px64-rw72 Uncontrolled Resource Consumption in Pillow |
High EPSS 2.24% |
< 6.2.2 | 6.2.2 |
| GHSA-r7rm-8j6h-r933 Buffer Copy without Checking Size of Input in Pillow |
Critical EPSS 4.21% |
< 6.2.2 | 6.2.2 |
| GHSA-hj69-c76v-86wr Out-of-bounds Read in Pillow |
High EPSS 2.75% |
< 6.2.2 | 6.2.2 |
| GHSA-p49h-hjvm-jg3h PCX P mode buffer overflow in Pillow |
Critical EPSS 3.69% |
< 6.2.2 | 6.2.2 |
| GHSA-p49h-hjvm-jg3h PCX P mode buffer overflow in Pillow |
Critical EPSS 3.69% |
< 6.2.2 | 6.2.2 |
| GHSA-vcqg-3p29-xw73 Integer overflow in Pillow |
High EPSS 1.98% |
< 6.2.2 | 6.2.2 |
| GHSA-vcqg-3p29-xw73 Integer overflow in Pillow |
High EPSS 1.98% |
< 6.2.2 | 6.2.2 |
| GHSA-hj69-c76v-86wr Out-of-bounds Read in Pillow |
High EPSS 2.75% |
< 6.2.2 | 6.2.2 |
| GHSA-r7rm-8j6h-r933 Buffer Copy without Checking Size of Input in Pillow |
Critical EPSS 4.21% |
< 6.2.2 | 6.2.2 |
| GHSA-j7mj-748x-7p78 DOS attack in Pillow when processing specially crafted image files |
High EPSS 3.13% |
< 6.2.0 | 6.2.0 |
| GHSA-j7mj-748x-7p78 DOS attack in Pillow when processing specially crafted image files |
High EPSS 3.13% |
< 6.2.0 | 6.2.0 |
| PYSEC-2019-40 An issue was discovered in Pillow before 6.2.0. Withdrawn |
Not rated yet | < 6.2.0 | 6.2.0 |
| GHSA-v9pc-9mvp-x87g Pillow Buffer overflow in Jpeg2KEncode.c |
Medium EPSS 2.58% |
>= 2.5.0, < 3.1.2 | 3.1.2 |
| GHSA-v9pc-9mvp-x87g Pillow Buffer overflow in Jpeg2KEncode.c |
Medium EPSS 2.58% |
>= 2.5.0, < 3.1.2 | 3.1.2 |
| GHSA-w4vg-rf63-f3j3 Arbitrary code using "crafted image file" approach affecting Pillow |
High EPSS 1.90% |
< 3.3.2 | 3.3.2 |
| GHSA-rwr3-c2q8-gm56 Pillow Integer overflow in Map.c |
Medium EPSS 1.94% |
< 3.3.2 | 3.3.2 |
| GHSA-rwr3-c2q8-gm56 Pillow Integer overflow in Map.c |
Medium EPSS 1.94% |
< 3.3.2 | 3.3.2 |
| GHSA-w4vg-rf63-f3j3 Arbitrary code using "crafted image file" approach affecting Pillow |
High EPSS 1.90% |
< 3.3.2 | 3.3.2 |
| GHSA-hggx-3h72-49ww Pillow Buffer overflow in ImagingLibTiffDecode |
Medium EPSS 2.66% |
< 3.1.1 | 3.1.1 |
| GHSA-hvr8-466p-75rh Pillow Integer overflow in ImagingResampleHorizontal |
Critical EPSS 7.87% |
< 3.1.1 | 3.1.1 |
| GHSA-hggx-3h72-49ww Pillow Buffer overflow in ImagingLibTiffDecode |
Medium EPSS 2.66% |
< 3.1.1 | 3.1.1 |
| GHSA-8xjv-v9xq-m5h9 Pillow Buffer overflow in ImagingFliDecode |
Medium EPSS 2.52% |
< 3.1.1 | 3.1.1 |
| GHSA-8xjv-v9xq-m5h9 Pillow Buffer overflow in ImagingFliDecode |
Medium EPSS 2.52% |
< 3.1.1 | 3.1.1 |
| GHSA-3c5c-7235-994j Pillow buffer overflow in ImagingPcdDecode |
Medium EPSS 4.03% |
< 3.1.1 | 3.1.1 |
| GHSA-3c5c-7235-994j Pillow buffer overflow in ImagingPcdDecode |
Medium EPSS 4.03% |
< 3.1.1 | 3.1.1 |
| GHSA-hvr8-466p-75rh Pillow Integer overflow in ImagingResampleHorizontal |
Critical EPSS 7.87% |
< 3.1.1 | 3.1.1 |
| GHSA-j6f7-g425-4gmx Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin |
High EPSS 1.99% |
< 2.5.3 | 2.5.3 |
| GHSA-j6f7-g425-4gmx Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin |
High EPSS 1.99% |
< 2.5.3 | 2.5.3 |
| GHSA-h5rf-vgqx-wjv2 Pillow denial of service via PNG bomb |
High EPSS 4.57% |
< 2.7.0 | 2.7.0 |
| GHSA-h5rf-vgqx-wjv2 Pillow denial of service via PNG bomb |
High EPSS 4.57% |
< 2.7.0 | 2.7.0 |
| GHSA-cfmr-38g9-f2h7 Pillow denial of service via Crafted Block Size |
High EPSS 3.36% |
>= 2.5, < 2.5.2 | 2.5.2 |
| GHSA-cfmr-38g9-f2h7 Pillow denial of service via Crafted Block Size |
High EPSS 3.36% |
< 2.3.2>= 2.5, < 2.5.2 | 2.3.22.5.2 |
| GHSA-cfmr-38g9-f2h7 Pillow denial of service via Crafted Block Size |
High EPSS 3.36% |
< 2.3.2 | 2.3.2 |
| GHSA-8m9x-pxwq-j236 Pillow command injection |
Critical EPSS 10.36% |
< 2.5.0 | 2.5.0 |
| GHSA-8m9x-pxwq-j236 Pillow command injection |
Critical EPSS 10.36% |
< 2.5.0 | 2.5.0 |
| GHSA-x895-2wrm-hvp7 PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles |
High EPSS 0.50% |
< 2.3.1 | 2.3.1 |
| GHSA-r854-96gq-rfg3 Pillow Temporary file name leakage |
Medium EPSS 0.45% |
< 2.3.1 | 2.3.1 |
| GHSA-r854-96gq-rfg3 Pillow Temporary file name leakage |
Medium EPSS 0.45% |
< 2.3.1 | 2.3.1 |
| GHSA-x895-2wrm-hvp7 PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles |
High EPSS 0.50% |
< 2.3.1 | 2.3.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor