Package · Alpine

py-pillow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2021-23437

Regular Expression Denial of Service (ReDoS)

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI

Sep 3, 2021