PatchFirst · Latest vulnerabilities
Vulnerabilities published for pillow in the last 30 days: 38. Listed in the KEV catalogue: 0.
Vulnerabilities: 62
An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.
An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.
Check your installed stack and versions against the current vulnerability feeds.