python-pillow

Records319All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical40CVSS 9.0–10.0

CVSS high143CVSS 7.0–8.9

Exploited now

python-pillow records in CISA KEV

No python-pillow vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Python 140 records HIGH Pillow 111 records HIGH Urllib3 22 records MEDIUM Requests 6 records MEDIUM Setuptools 4 records HIGH Keyring 3 records LOW Black 2 records MEDIUM Pyxdg 2 records LOW

Records

6 records in Requests · all components

TI-2018-12846 CVE-2018-18074 · GHSA-x84v-xcm2-53pg

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an…

MEDIUM 43

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06925 Published 2018-10-09 Partial fix · 2.20.0 CWE-522

TI-2015-02029 CVE-2015-2296 · GHSA-pg2w-x9wp-vw92

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows…

LOW 36

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03156 Published 2015-03-18 Partial fix · 2.6.0

TI-2023-15957 CVE-2023-32681 · GHSA-j8r2-6x86-q33q

Unintended leak of Proxy-Authorization header in requests

LOW 33

Requests is a HTTP library.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02974 Published 2023-05-26 Partial fix · 2.31.0 CWE-200

TI-2014-01432 CVE-2014-1830 · GHSA-652x-xj99-gmcc

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive…

LOW 27

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02036 Published 2014-10-15 Partial fix · 2.3.0 CWE-200

TI-2014-01431 CVE-2014-1829 · GHSA-cfj3-7x9c-4p3h

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc…

LOW 27

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.022 Published 2014-10-15 Partial fix · 2.3.0 CWE-200

TI-2026-20745 CVE-2026-25645 · GHSA-gc5v-m9x4-r6x2

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

LOW 24

Requests is a HTTP library.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00189 Published 2026-03-25 Partial fix · 2.33.0 CWE-377

Open these records in search →

Critical	40
High	143
Medium	120
Low	16
No CVSS	0