Homepage

pillow-simd@3.4.1.post2 vulnerabilities

Python Imaging Library (Fork)

  • latest version

    9.5.0.post2

  • latest non vulnerable version

    9.5.0.post2

  • first published

    9 years ago

  • latest version published

    4 months ago

  • licenses detected

  • View pillow-simd package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the pillow-simd package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Insufficient Validation

    Pillow-SIMD is a forked from python-pillow/Pillow

    Pillow-SIMD is "following" Pillow. Pillow-SIMD versions are 100% compatible drop-in replacements for Pillow of the same version.

    Affected versions of this package are vulnerable to Insufficient Validation. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.

    How to fix Insufficient Validation?

    Upgrade Pillow-SIMD to version 8.2.0.post0 or higher.

    [,8.2.0.post0)
    • H
    Out-of-bounds Read

    Pillow-SIMD is a forked from python-pillow/Pillow

    Pillow-SIMD is "following" Pillow. Pillow-SIMD versions are 100% compatible drop-in replacements for Pillow of the same version.

    Affected versions of this package are vulnerable to Out-of-bounds Read due to invalid tile boundaries lead.

    How to fix Out-of-bounds Read?

    Upgrade Pillow-SIMD to version 8.2.0.post0 or higher.

    [,8.2.0.post0)
    • H
    Regular Expression Denial of Service (ReDoS)

    Pillow-SIMD is a forked from python-pillow/Pillow

    Pillow-SIMD is "following" Pillow. Pillow-SIMD versions are 100% compatible drop-in replacements for Pillow of the same version.

    Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via next_object_id.

    How to fix Regular Expression Denial of Service (ReDoS)?

    Upgrade Pillow-SIMD to version 8.2.0.post0 or higher.

    [,8.2.0.post0)
    Go back to all versions of this package