https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:17:36.267996+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-00581 bdu:2022-00581 2026-10-03T10:17:36.586986+00:00 bdu:2022-00581 https://cve.radiocsirt.org/vuln/bit-pillow-2022-22815 BIT-pillow-2022-22815 2026-10-03T10:17:36.587033+00:00

Affected: Bitnami: pillow

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

 https://cve.radiocsirt.org/vuln/brew-pillow-cve-2022-22815 BREW-pillow-CVE-2022-22815 2026-10-03T10:17:36.587076+00:00

Affected: Homebrew: pillow

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

 https://cve.radiocsirt.org/vuln/euvd-2026-13557 EUVD-2026-13557 2026-10-03T10:17:36.587113+00:00 EUVD-2026-13557 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22815 fkie_cve-2022-22815 2026-10-03T10:17:36.587135+00:00

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

 https://cve.radiocsirt.org/vuln/ghsa-pw3c-h7wp-cvhx GHSA-pw3c-h7wp-cvhx — Improper Initialization in Pillow 2026-10-03T10:17:36.587173+00:00

Affected: PyPI: pillow

Pillow is the friendly PIL (Python Imaging Library) fork. `path_getbbox` in `path.c` in Pillow before 9.0.0 improperly initializes `ImagePath.Path`.

 https://cve.radiocsirt.org/vuln/gsd-2022-22815 gsd-2022-22815 2026-10-03T10:17:36.587212+00:00 gsd-2022-22815 https://cve.radiocsirt.org/vuln/oesa-2022-1526 OESA-2022-1526 — python-pillow security update 2026-10-03T10:17:36.587257+00:00

Affected: openEuler:20.03-LTS-SP1: python-pillow, openEuler:20.03-LTS-SP2: python-pillow, openEuler:20.03-LTS-SP3: python-pillow

Python image processing library. Security Fix(es): path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.(CVE-2022-22816) PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.(CVE-2022-22817) path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.(CVE-2022-22815)

 https://cve.radiocsirt.org/vuln/pysec-2022-8 PYSEC-2022-8 2026-10-03T10:17:36.587296+00:00

Affected: PyPI: pillow

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

 https://cve.radiocsirt.org/vuln/rhsa-2022:0643 RHSA-2022:0643 — Red Hat Security Advisory: python-pillow security update 2026-10-03T10:17:36.587316+00:00

python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions

 https://cve.radiocsirt.org/vuln/suse-su-2024:1673-1 SUSE-SU-2024:1673-1 — Security update for python-Pillow 2026-10-03T10:17:36.587339+00:00

Security update for python-Pillow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22815 UBUNTU-CVE-2022-22815 2026-10-03T10:17:36.587359+00:00

Affected: Ubuntu:Pro:14.04:LTS: pillow, Ubuntu:Pro:16.04:LTS: pillow, Ubuntu:18.04:LTS: pillow, Ubuntu:20.04:LTS: pillow, Ubuntu:Pro:20.04:LTS: pillow-python2, Ubuntu:22.04:LTS: pillow

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-03T10:17:36.587384+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.