pillow vulnerabilities

Python Imaging Library (fork)

latest version

12.0.0

latest non vulnerable version

first published

15 years ago

latest version published

18 days ago

licenses detected

HPND
[6.0.0,11.0.0)
MIT-CMU
[1.0,6.0.0); [11.0.0,)

View pillow package health on Snyk Advisor (opens in a new tab)

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the pillow package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Out-of-Bounds	[2.5.0,3.1.2)
H Heap-based Buffer Overflow	[11.2.1,11.3.0)
M Incorrect Type Conversion or Cast	[9.1.0,9.3.0)
M Buffer Overflow	[,10.3.0)
H Denial of Service (DoS)	[,10.2.0)
H Denial of Service (DoS)	[,10.2.0)
H Eval Injection	[,10.2.0)
H Uncontrolled Resource Consumption ('Resource Exhaustion')	[,10.0.0)
C Heap-based Buffer Overflow	[,10.0.1)
M Denial of Service (DoS)	[9.1.0,9.4.0)
M Denial of Service (DoS)	[,9.2.0)
M Denial of Service (DoS)	[,9.2.0)
H Denial of Service (DoS)	[9.2.0,9.3.0)
H Denial of Service (DoS)	[9.2.0,9.3.0)
M Heap-based Buffer Overflow	[9.1.0,9.1.1)
M Improper Input Validation	[,9.0.1)
M Buffer Over-read	[,9.0.0)
M Improper Initialization	[,9.0.0)
C Arbitrary Code Execution	[,9.0.0)
M Denial of Service (DoS)	[,9.0.0)
H Out-of-bounds Read	[7.1.0,8.3.2)
H Regular Expression Denial of Service (ReDoS)	[5.2.0,8.3.2)
M Buffer Overflow	[1.0,8.3.0)
H Out-of-bounds Read	[2.4.0,8.2.0)
H Out-of-bounds Read	[2.4.0,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Denial of Service (DoS)	[,8.2.0)
H Heap-based Buffer Overflow	[,8.1.1)
H Insufficient Validation	[,8.1.1)
H Denial of Service (DoS)	[,8.1.2)
H Denial of Service (DoS)	[,8.1.2)
H Denial of Service (DoS)	[,8.1.2)
H Out-of-bounds Read	[,8.1.1)
H Regular Expression Denial of Service (ReDoS)	[0,8.1.1)
M Out-of-bounds Write	[6.0.0,8.1.0)
H Out-of-bounds Read	[4.3.0,8.1.0)
H Out-of-bounds Read	[,8.1.0)
C Command Injection	[,2.5.0)
M Buffer Overflow	[,7.1.0)
M Out-of-bounds Read	[0,7.1.0)
M Out-of-bounds Read	[0,7.1.0)
M Out-of-bounds Read	[,7.1.0)
M Out-of-Bounds	[,7.1.0)
H Integer Overflow	[,6.2.2)
H Buffer Overflow	[,6.2.2)
H Buffer Overflow	[,6.2.2)
H Buffer Overflow	[,6.2.2)
M Denial of Service (DoS)	[,6.2.2)
M Allocation of Resources Without Limits or Throttling	[,6.2.0)
C Denial of Service (DoS)	[,3.1.1)
M Information Exposure	[,3.3.2)
M Denial of Service (DoS)	[2.5.0,3.1.2)
H Arbitrary Code Execution	[,3.3.2)
M Denial of Service (DoS)	[,3.1.1)
M Denial of Service (DoS)	[,3.1.1)
M Denial of Service (DoS)	[,3.1.1)
M Denial of Service (DoS)	[,2.3.2)[2.5,2.5.2)
M Denial of Service (DoS)	[,2.5.3)
M Denial of Service (DoS)	[,2.7.0)
C Arbitrary Command Execution	[,2.5.0)
M Symlink Attack	[,2.3.1)
M Symlink Attack	[,2.3.1)

Package versions

103 VERSIONS IN TOTAL See all versions

version	published	direct vulnerabilities
12.0.0	15 Oct, 2025	0 C 0 H 0 M 0 L
11.3.0	1 Jul, 2025	0 C 0 H 0 M 0 L
11.2.1	12 Apr, 2025	0 C 1 H 0 M 0 L
11.1.0	2 Jan, 2025	0 C 0 H 0 M 0 L
11.0.0	15 Oct, 2024	0 C 0 H 0 M 0 L
10.4.0	1 Jul, 2024	0 C 0 H 0 M 0 L
10.3.0	1 Apr, 2024	0 C 0 H 0 M 0 L
10.2.0	2 Jan, 2024	0 C 0 H 1 M 0 L
10.1.0	15 Oct, 2023	0 C 3 H 1 M 0 L
10.0.1	15 Sep, 2023	0 C 3 H 1 M 0 L