Pillow vulnerabilities

Python Imaging Library (Fork)

latest version

11.3.0

latest non vulnerable version

first published

15 years ago

latest version published

1 months ago

licenses detected

HPND
[6.0.0,11.0.0)
MIT-CMU
[1.0,6.0.0); [11.0.0,)

View Pillow package health on Snyk Advisor (opens in a new tab)

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the Pillow package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Out-of-Bounds	[2.5.0,3.1.2)
H Heap-based Buffer Overflow	[11.2.1,11.3.0)
M Incorrect Type Conversion or Cast	[9.1.0,9.3.0)
H Buffer Overflow	[,10.3.0)
H Denial of Service (DoS)	[,10.2.0)
H Denial of Service (DoS)	[,10.2.0)
H Eval Injection	[,10.2.0)
H Uncontrolled Resource Consumption ('Resource Exhaustion')	[,10.0.0)
C Heap-based Buffer Overflow	[,10.0.1)
M Denial of Service (DoS)	[9.1.0,9.4.0)
M Denial of Service (DoS)	[,9.2.0)
M Denial of Service (DoS)	[,9.2.0)
H Denial of Service (DoS)	[9.2.0,9.3.0)
H Denial of Service (DoS)	[9.2.0,9.3.0)
M Heap-based Buffer Overflow	[9.1.0,9.1.1)
M Improper Input Validation	[,9.0.1)
M Buffer Over-read	[,9.0.0)
M Improper Initialization	[,9.0.0)
C Arbitrary Code Execution	[,9.0.0)
M Denial of Service (DoS)	[,9.0.0)
H Out-of-bounds Read	[7.1.0,8.3.2)
H Regular Expression Denial of Service (ReDoS)	[5.2.0,8.3.2)
M Buffer Overflow	[1.0,8.3.0)
H Out-of-bounds Read	[2.4.0,8.2.0)
H Out-of-bounds Read	[2.4.0,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Heap-based Buffer Overflow	[,8.1.1)
H Insufficient Validation	[,8.1.1)
H Denial of Service (DoS)	[,8.1.2)
H Denial of Service (DoS)	[,8.1.2)
H Denial of Service (DoS)	[,8.1.2)
H Out-of-bounds Read	[,8.1.1)
H Regular Expression Denial of Service (ReDoS)	[0,8.1.1)
M Out-of-bounds Write	[6.0.0,8.1.0)
H Out-of-bounds Read	[4.3.0,8.1.0)
H Out-of-bounds Read	[,8.1.0)
C Command Injection	[,2.5.0)
M Buffer Overflow	[,7.1.0)
M Out-of-bounds Read	[0,7.1.0)
M Out-of-bounds Read	[0,7.1.0)
M Out-of-bounds Read	[,7.1.0)
M Out-of-Bounds	[,7.1.0)
H Integer Overflow	[,6.2.2)
H Buffer Overflow	[,6.2.2)
H Buffer Overflow	[,6.2.2)
H Buffer Overflow	[,6.2.2)
M Denial of Service (DoS)	[,6.2.2)
M Allocation of Resources Without Limits or Throttling	[,6.2.0)
C Denial of Service (DoS)	[,3.1.1)
M Information Exposure	[,3.3.2)
M Denial of Service (DoS)	[2.5.0,3.1.2)
H Arbitrary Code Execution	[,3.3.2)
M Denial of Service (DoS)	[,3.1.1)
M Denial of Service (DoS)	[,3.1.1)
M Denial of Service (DoS)	[,3.1.1)
M Denial of Service (DoS)	[,2.3.2)[2.5,2.5.2)
M Denial of Service (DoS)	[,2.5.3)
M Denial of Service (DoS)	[,2.7.0)
C Arbitrary Command Execution	[,2.5.0)
M Symlink Attack	[,2.3.1)
M Symlink Attack	[,2.3.1)

Package versions

100 VERSIONS IN TOTAL See all versions

version	published	direct vulnerabilities
11.3.0	1 Jul, 2025	0 C 0 H 0 M 0 L
11.2.1	12 Apr, 2025	0 C 1 H 0 M 0 L
11.1.0	2 Jan, 2025	0 C 0 H 0 M 0 L
11.0.0	15 Oct, 2024	0 C 0 H 0 M 0 L
10.4.0	1 Jul, 2024	0 C 0 H 0 M 0 L
10.3.0	1 Apr, 2024	0 C 0 H 0 M 0 L
10.2.0	2 Jan, 2024	0 C 1 H 0 M 0 L
10.1.0	15 Oct, 2023	0 C 4 H 0 M 0 L
10.0.1	15 Sep, 2023	0 C 4 H 0 M 0 L
10.0.0	1 Jul, 2023	1 C 4 H 0 M 0 L