High DLA-3724-1 1 CVE

pillow - security update

Published Jan 29, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	pillow	5.4.1-2+deb10u4

Vulnerabilities 1

High 8.1

CVE-2023-50447

Arbitrary Code Execution in Pillow

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).

kubeflow-pipelines-visualization-server pillow pillow pillow Debian Ubuntu Alpine Wolfi PyPI

Jan 19, 2024