Read the docs

python-pillow

Records319All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high143CVSS 7.0–8.9

Exploited now

python-pillow records in CISA KEV

No python-pillow vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Python 140 records HIGH Pillow 111 records HIGH Urllib3 22 records MEDIUM Requests 6 records MEDIUM Setuptools 4 records HIGH Keyring 3 records LOW Black 2 records MEDIUM Pyxdg 2 records LOW

Records

4 records in Setuptools · all components

TI-2013-01435 CVE-2013-1633 · GHSA-27x4-j476-jp5f

easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI…

Priority LOW 34

easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0196 Published 2013-08-06 Partial fix · 0.7 CWE-20
Open these records in search →