CVE-2021-23437

Published September 3rd, 2021

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

python-pillow/Pillow

Python Imaging Library (fork)

GitHub

13.6K