Lucene search

K
osvGoogleOSV:PYSEC-2022-168
HistoryMar 28, 2022 - 2:15 a.m.

PYSEC-2022-168

2022-03-2802:15:00
Google
osv.dev
45
pillow
file deletion
temporary pathnames

EPSS

0.002

Percentile

60.0%

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.