https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:29:00.628526+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0643 ALSA-2022:0643 — Important: python-pillow security update 2026-10-03T12:29:00.887540+00:00

Affected: AlmaLinux:8: python3-pillow, AlmaLinux:8: python3-pillow-devel, AlmaLinux:8: python3-pillow-doc, AlmaLinux:8: python3-pillow-tk

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions (CVE-2022-22817)

* python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c (CVE-2022-22816)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-00582 bdu:2022-00582 2026-10-03T12:29:00.887605+00:00 bdu:2022-00582 https://cve.radiocsirt.org/vuln/bit-pillow-2022-22816 BIT-pillow-2022-22816 2026-10-03T12:29:00.887621+00:00

Affected: Bitnami: pillow

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

 https://cve.radiocsirt.org/vuln/brew-pillow-cve-2022-22816 BREW-pillow-CVE-2022-22816 2026-10-03T12:29:00.887641+00:00

Affected: Homebrew: pillow

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

 https://cve.radiocsirt.org/vuln/cnvd-2022-05433 cnvd-2022-05433 2026-10-03T12:29:00.887682+00:00 cnvd-2022-05433 https://cve.radiocsirt.org/vuln/euvd-2026-13567 EUVD-2026-13567 2026-10-03T12:29:00.887708+00:00 EUVD-2026-13567 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22816 fkie_cve-2022-22816 2026-10-03T12:29:00.887718+00:00

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

 https://cve.radiocsirt.org/vuln/ghsa-xrcv-f9gm-v42c GHSA-xrcv-f9gm-v42c — Out-of-bounds Read in Pillow 2026-10-03T12:29:00.887738+00:00

Affected: PyPI: pillow

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

 https://cve.radiocsirt.org/vuln/gsd-2022-22816 gsd-2022-22816 2026-10-03T12:29:00.887755+00:00 gsd-2022-22816 https://cve.radiocsirt.org/vuln/oesa-2022-1526 OESA-2022-1526 — python-pillow security update 2026-10-03T12:29:00.887766+00:00

Affected: openEuler:20.03-LTS-SP1: python-pillow, openEuler:20.03-LTS-SP2: python-pillow, openEuler:20.03-LTS-SP3: python-pillow

Python image processing library. Security Fix(es): path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.(CVE-2022-22816) PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.(CVE-2022-22817) path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.(CVE-2022-22815)

 https://cve.radiocsirt.org/vuln/pysec-2022-9 PYSEC-2022-9 2026-10-03T12:29:00.887791+00:00

Affected: PyPI: pillow

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

 https://cve.radiocsirt.org/vuln/rhsa-2022:0609 RHSA-2022:0609 — Red Hat Security Advisory: python-pillow security update 2026-10-03T12:29:00.887808+00:00

python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions

 https://cve.radiocsirt.org/vuln/rhsa-2022:0665 RHSA-2022:0665 — Red Hat Security Advisory: python-pillow security update 2026-10-03T12:29:00.887826+00:00

python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions

 https://cve.radiocsirt.org/vuln/suse-su-2024:1673-1 SUSE-SU-2024:1673-1 — Security update for python-Pillow 2026-10-03T12:29:00.887842+00:00

Security update for python-Pillow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22816 UBUNTU-CVE-2022-22816 2026-10-03T12:29:00.887859+00:00

Affected: Ubuntu:Pro:14.04:LTS: pillow, Ubuntu:Pro:16.04:LTS: pillow, Ubuntu:18.04:LTS: pillow, Ubuntu:20.04:LTS: pillow, Ubuntu:Pro:20.04:LTS: pillow-python2, Ubuntu:22.04:LTS: pillow

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-03T12:29:00.887884+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.