CVEs affecting projects tracked on Release Alert, from NVD & OSV.
libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.