1 matches found
GHSA-8VJ2-VXX3-667W Arbitrary expression injection in Pillow
PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method ImageMath.eval"execexit". While Pillow 9.0.0 restricted top-level builtins available to PIL.ImageMath.eval, it did not prevent builtins available to lambda expression...
9.8CVSS6.8AI score0.03427EPSS
SaveExploits0References11
20