CVEs affecting projects tracked on Release Alert, from NVD & OSV.
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.