Most recent entries from all

bdu:2023-01714

BIT-pillow-2022-24303

Affected: Bitnami: pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

BREW-pillow-CVE-2022-24303

Affected: Homebrew: pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

cnvd-2022-28799

EUVD-2026-14108

fkie_cve-2022-24303

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

GHSA-9j59-75qj-795w — Path traversal in Pillow

Affected: PyPI: Pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

gsd-2022-24303

OESA-2022-1540 — python-pillow security update

Affected: openEuler:20.03-LTS-SP1: python-pillow, openEuler:20.03-LTS-SP2: python-pillow, openEuler:20.03-LTS-SP3: python-pillow

Python image processing library. Security Fix(es): Pillow is a PIL (Python Imaging Library) fork. Affected versions of this package are vulnerable to Improper Input Validation. When the path to the temporary directory on Linux or macOS contained a space, this would break removal of the temporary image file after im.show() (and related actions), and potentially remove an unrelated file.(CVE-2022-24303)

openSUSE-SU-2024:11814-1 — python310-Pillow-9.0.1-1.1 on GA media

python310-Pillow-9.0.1-1.1 on GA media

PYSEC-2022-168

Affected: PyPI: pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

UBUNTU-CVE-2022-24303

Affected: Ubuntu:20.04:LTS: pillow, Ubuntu:Pro:20.04:LTS: pillow-python2

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.