https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T08:08:13.843097+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01714 bdu:2023-01714 2026-10-13T08:08:13.989472+00:00 bdu:2023-01714 https://cve.radiocsirt.org/vuln/bit-pillow-2022-24303 BIT-pillow-2022-24303 2026-10-13T08:08:13.989510+00:00

Affected: Bitnami: pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

 https://cve.radiocsirt.org/vuln/brew-pillow-cve-2022-24303 BREW-pillow-CVE-2022-24303 2026-10-13T08:08:13.989551+00:00

Affected: Homebrew: pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

 https://cve.radiocsirt.org/vuln/cnvd-2022-28799 cnvd-2022-28799 2026-10-13T08:08:13.989572+00:00 cnvd-2022-28799 https://cve.radiocsirt.org/vuln/euvd-2026-14108 EUVD-2026-14108 2026-10-13T08:08:13.989585+00:00 EUVD-2026-14108 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24303 fkie_cve-2022-24303 2026-10-13T08:08:13.989597+00:00

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

 https://cve.radiocsirt.org/vuln/ghsa-9j59-75qj-795w GHSA-9j59-75qj-795w — Path traversal in Pillow 2026-10-13T08:08:13.989617+00:00

Affected: PyPI: Pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

 https://cve.radiocsirt.org/vuln/gsd-2022-24303 gsd-2022-24303 2026-10-13T08:08:13.989637+00:00 gsd-2022-24303 https://cve.radiocsirt.org/vuln/oesa-2022-1540 OESA-2022-1540 — python-pillow security update 2026-10-13T08:08:13.989648+00:00

Affected: openEuler:20.03-LTS-SP1: python-pillow, openEuler:20.03-LTS-SP2: python-pillow, openEuler:20.03-LTS-SP3: python-pillow

Python image processing library. Security Fix(es): Pillow is a PIL (Python Imaging Library) fork. Affected versions of this package are vulnerable to Improper Input Validation. When the path to the temporary directory on Linux or macOS contained a space, this would break removal of the temporary image file after im.show() (and related actions), and potentially remove an unrelated file.(CVE-2022-24303)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11814-1 openSUSE-SU-2024:11814-1 — python310-Pillow-9.0.1-1.1 on GA media 2026-10-13T08:08:13.989673+00:00

python310-Pillow-9.0.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2022-168 PYSEC-2022-168 2026-10-13T08:08:13.989691+00:00

Affected: PyPI: pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24303 UBUNTU-CVE-2022-24303 2026-10-13T08:08:13.989707+00:00

Affected: Ubuntu:20.04:LTS: pillow, Ubuntu:Pro:20.04:LTS: pillow-python2

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.