https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:08:10.879930+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02242 bdu:2022-02242 2026-10-04T14:08:11.141751+00:00 bdu:2022-02242 https://cve.radiocsirt.org/vuln/bit-pillow-2021-23437 BIT-pillow-2021-23437 — Regular Expression Denial of Service (ReDoS) 2026-10-04T14:08:11.141794+00:00

Affected: Bitnami: pillow

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

 https://cve.radiocsirt.org/vuln/brew-pillow-cve-2021-23437 BREW-pillow-CVE-2021-23437 2026-10-04T14:08:11.141829+00:00

Affected: Homebrew: pillow

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

 https://cve.radiocsirt.org/vuln/euvd-2026-172475 EUVD-2026-172475 2026-10-04T14:08:11.141851+00:00 EUVD-2026-172475 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23437 fkie_cve-2021-23437 2026-10-04T14:08:11.141864+00:00

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

 https://cve.radiocsirt.org/vuln/ghsa-98vv-pw6r-q6q4 GHSA-98vv-pw6r-q6q4 — Uncontrolled Resource Consumption in pillow 2026-10-04T14:08:11.141885+00:00

Affected: PyPI: pillow

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

 https://cve.radiocsirt.org/vuln/gsd-2021-23437 gsd-2021-23437 2026-10-04T14:08:11.141904+00:00 gsd-2021-23437 https://cve.radiocsirt.org/vuln/oesa-2021-1383 OESA-2021-1383 — python-pillow security update 2026-10-04T14:08:11.141915+00:00

Affected: openEuler:20.03-LTS-SP1: python-pillow, openEuler:20.03-LTS-SP2: python-pillow

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fix(es): The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.(CVE-2021-23437)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11209-1 openSUSE-SU-2024:11209-1 — python36-Pillow-8.3.2-1.2 on GA media 2026-10-04T14:08:11.141937+00:00

python36-Pillow-8.3.2-1.2 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2021-317 PYSEC-2021-317 2026-10-04T14:08:11.141963+00:00

Affected: PyPI: pillow

The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

 https://cve.radiocsirt.org/vuln/suse-su-2021:3234-1 SUSE-SU-2021:3234-1 — Security update for python-Pillow 2026-10-04T14:08:11.141980+00:00

Security update for python-Pillow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23437 UBUNTU-CVE-2021-23437 2026-10-04T14:08:11.141995+00:00

Affected: Ubuntu:Pro:14.04:LTS: pillow, Ubuntu:Pro:16.04:LTS: pillow, Ubuntu:18.04:LTS: pillow, Ubuntu:20.04:LTS: pillow, Ubuntu:Pro:20.04:LTS: pillow-python2, Ubuntu:22.04:LTS: pillow

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.