https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:16:33.042978+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-pillow-cve-2014-1932 BREW-pillow-CVE-2014-1932 — PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles 2026-10-05T21:16:33.046998+00:00

Affected: Homebrew: pillow

The (1) `load_djpeg` function in `JpegImagePlugin.py`, (2) `Ghostscript` function in `EpsImagePlugin.py`, (3) `load` function in `IptcImagePlugin.py`, and (4) `_copy` function in `Image.py` in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

 https://cve.radiocsirt.org/vuln/euvd-2026-97975 EUVD-2026-97975 2026-10-05T21:16:33.047048+00:00 EUVD-2026-97975 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1932 fkie_cve-2014-1932 2026-10-05T21:16:33.047064+00:00

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

 https://cve.radiocsirt.org/vuln/ghsa-x895-2wrm-hvp7 GHSA-x895-2wrm-hvp7 — PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles 2026-10-05T21:16:33.047087+00:00

Affected: PyPI: pillow

The (1) `load_djpeg` function in `JpegImagePlugin.py`, (2) `Ghostscript` function in `EpsImagePlugin.py`, (3) `load` function in `IptcImagePlugin.py`, and (4) `_copy` function in `Image.py` in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

 https://cve.radiocsirt.org/vuln/gsd-2014-1932 gsd-2014-1932 2026-10-05T21:16:33.047109+00:00 gsd-2014-1932 https://cve.radiocsirt.org/vuln/pysec-2014-22 PYSEC-2014-22 2026-10-05T21:16:33.047120+00:00

Affected: PyPI: pillow

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

 https://cve.radiocsirt.org/vuln/suse-su-2015:0777-1 SUSE-SU-2015:0777-1 — Security update for python-Pillow 2026-10-05T21:16:33.047138+00:00

Security update for python-Pillow