Lucene search
+L

1 matches found

OSV
OSV
added 2022/01/12 8:07 p.m.9 views

GHSA-8VJ2-VXX3-667W Arbitrary expression injection in Pillow

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method ImageMath.eval"execexit". While Pillow 9.0.0 restricted top-level builtins available to PIL.ImageMath.eval, it did not prevent builtins available to lambda expression...

9.8CVSS6.8AI score0.03427EPSS
SaveExploits0References11
Rows per page
Query Builder