1 matches found
MGASA-2024-0018 Updated python-pillow packages fix a security vulnerability
This update fixes the following security issue: Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter This is a different vulnerability than CVE-2022-22817 which was about the expression parameter...
8.1CVSS8.6AI score0.01703EPSS
SaveExploits0References2
20