PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
pillow Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags High Risk 8.0 20 days ago 13 hours ago
pillow Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise Medium Risk 6.5 19 days ago 12 days ago
pillow No summary available Medium Risk 6.5 20 days ago 12 days ago
pillow Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer High Risk 8.0 19 days ago 12 days ago
pillow Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 Medium Risk 6.0 18 days ago 12 days ago
pillow No summary available Medium Risk 5.3 20 days ago 12 days ago
pillow Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS High Risk 8.0 19 days ago 12 days ago
pillow No summary available Medium Risk 6.5 20 days ago 12 days ago
pillow Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) Medium Risk 6.5 19 days ago 12 days ago
pillow No summary available Medium Risk 6.5 20 days ago 12 days ago
pillow Pillow: TarIO negative size field causes infinite CPU-spin loop High Risk 8.0 19 days ago 12 days ago
pillow No summary available Medium Risk 6.5 20 days ago 12 days ago
pillow Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time High Risk 8.0 19 days ago 12 days ago
pillow No summary available Medium Risk 6.5 20 days ago 12 days ago
pillow Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion High Risk 8.0 19 days ago 12 days ago
pillow Pillow multi-frame loaders can reuse stale native image storage after mode transitions Critical 9.8 19 days ago 12 days ago
pillow No summary available Critical 9.8 20 days ago 12 days ago
pillow Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode Medium Risk 6.5 19 days ago 12 days ago
pillow Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) High Risk 8.0 19 days ago 12 days ago
pillow No summary available High Risk 8.1 20 days ago 12 days ago
pillow Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes Medium Risk 6.0 20 days ago 13 days ago
pillow No summary available High Risk 7.5 22 days ago 13 days ago
pillow Pillow: Out-of-bounds access in _imagingmorph on a zero-width image High Risk 8.0 21 days ago 13 days ago
pillow No summary available High Risk 7.5 22 days ago 13 days ago
pillow Pillow: Heap buffer overflow in ImagingJpegDecode Critical 9.5 21 days ago 13 days ago
pillow No summary available Critical 9.8 22 days ago 13 days ago
pillow Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution Critical 9.5 18 days ago 13 days ago
pillow No summary available Critical 9.8 22 days ago 13 days ago
pillow Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read High Risk 8.0 21 days ago 13 days ago
pillow No summary available High Risk 7.1 22 days ago 13 days ago
pillow Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 High Risk 8.0 20 days ago 13 days ago
pillow No summary available High Risk 7.5 22 days ago 13 days ago
pillow Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform High Risk 8.0 20 days ago 13 days ago
pillow No summary available High Risk 7.5 22 days ago 13 days ago
pillow Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer Medium Risk 5.9 20 days ago 14 days ago
pillow No summary available High Risk 7.5 22 days ago 14 days ago
pillow Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images High Risk 8.0 20 days ago 14 days ago
pillow No summary available High Risk 7.5 22 days ago 14 days ago
pillow Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size Medium Risk 6.0 20 days ago 14 days ago
pillow No summary available High Risk 8.2 22 days ago 14 days ago
pillow Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree() Medium Risk 6.0 20 days ago 16 days ago
pillow Pillow: APNG background disposal allocates full canvas before decompression bomb check High Risk 8.0 20 days ago 16 days ago
pillow Pillow: Quadratic GIF comment concatenation allows DoS in Image.open() Medium Risk 6.0 20 days ago 16 days ago
pillow Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle High Risk 8.0 20 days ago 16 days ago
pillow Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) High Risk 8.0 20 days ago 16 days ago
pillow Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips High Risk 8.0 21 days ago 16 days ago
pillow Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO Critical 9.5 20 days ago 16 days ago
pillow Pillow: Quadratic GIF comment copying during save Medium Risk 6.0 20 days ago 16 days ago
pillow Pillow: Infinite loop in MIC n_frames when the embedded TIFF High Risk 8.0 20 days ago 16 days ago
pillow Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290) Medium Risk 6.5 21 days ago 16 days ago
Data courtesy of OSV.dev
Page 1