[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIUOMHcf8ufjZCD-y0-Df_v1HayT5IPo-v1hhXLNJauQ":3,"g5a-ex:python\u002Fpillow@*":375,"g5a-family:python\u002Fpillow":377},{"success":4,"data":5},true,{"product":6,"versions":200,"topVulnerabilitiesByEpss":292,"kevVulnerabilities":352,"seoMetadata":353,"meta":372},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":199},"python","pillow",91,54,0,"2025-07-01",[14,17,19,21,23,25,27,29,31,33,35,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.1",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"10.2.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"10.3.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"10.4.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"11.1.0",{"version":36,"cve_count":37,"kev_count":11,"has_kev":16},"11.2.1",1,{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},"11.3.0",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"1.2",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"12.0.0",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"1.3",{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"1.4",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"1.5",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"1.6",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.1",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.2",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.3",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.4",{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.5",{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.6",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.7",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.8",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.2",{"version":81,"cve_count":82,"kev_count":11,"has_kev":16},"2.3.0",2,{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.1",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":88,"cve_count":82,"kev_count":11,"has_kev":16},"2.5.0",{"version":90,"cve_count":82,"kev_count":11,"has_kev":16},"2.5.1",{"version":92,"cve_count":82,"kev_count":11,"has_kev":16},"2.5.2",{"version":94,"cve_count":37,"kev_count":11,"has_kev":16},"2.5.3",{"version":96,"cve_count":37,"kev_count":11,"has_kev":16},"2.6.0",{"version":98,"cve_count":37,"kev_count":11,"has_kev":16},"2.6.1",{"version":100,"cve_count":37,"kev_count":11,"has_kev":16},"2.6.2",{"version":102,"cve_count":37,"kev_count":11,"has_kev":16},"2.7.0",{"version":104,"cve_count":37,"kev_count":11,"has_kev":16},"2.8.0",{"version":106,"cve_count":37,"kev_count":11,"has_kev":16},"2.8.1",{"version":108,"cve_count":37,"kev_count":11,"has_kev":16},"2.8.2",{"version":110,"cve_count":37,"kev_count":11,"has_kev":16},"2.9.0",{"version":112,"cve_count":37,"kev_count":11,"has_kev":16},"3.0.0",{"version":114,"cve_count":37,"kev_count":11,"has_kev":16},"3.1.0",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.1",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.2",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.0",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.1",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.0",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.1",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"4.3.0",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"5.0.0",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"5.1.0",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"5.2.0",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"5.3.0",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"5.4.0",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"5.4.1",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"6.0.0",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"6.2.0",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"6.2.2",{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},"6.2.3",{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.0",{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},"7.1.0",{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},"7.1.1",{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},"7.1.2",{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},"7.2.0",{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},"8.0.0",{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},"8.0.1",{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},"8.1.0",{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},"8.1.1",{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},"8.1.2",{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.0",{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},"8.3.0",{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},"8.3.1",{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},"8.3.2",{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},"8.4.0",{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.0",{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.1",{"version":188,"cve_count":37,"kev_count":11,"has_kev":16},"9.1.0",{"version":190,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.1",{"version":192,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.0",{"version":194,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.0",{"version":196,"cve_count":11,"kev_count":11,"has_kev":16},"9.4.0",{"version":198,"cve_count":11,"kev_count":11,"has_kev":16},"9.5.0","Pillow by Python is a technology product with 91 tracked versions and 54 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":37,"kev_count":11,"has_kev":16},{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},{"version":81,"cve_count":82,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":82,"kev_count":11,"has_kev":16},{"version":90,"cve_count":82,"kev_count":11,"has_kev":16},{"version":92,"cve_count":82,"kev_count":11,"has_kev":16},{"version":94,"cve_count":37,"kev_count":11,"has_kev":16},{"version":96,"cve_count":37,"kev_count":11,"has_kev":16},{"version":98,"cve_count":37,"kev_count":11,"has_kev":16},{"version":100,"cve_count":37,"kev_count":11,"has_kev":16},{"version":102,"cve_count":37,"kev_count":11,"has_kev":16},{"version":104,"cve_count":37,"kev_count":11,"has_kev":16},{"version":106,"cve_count":37,"kev_count":11,"has_kev":16},{"version":108,"cve_count":37,"kev_count":11,"has_kev":16},{"version":110,"cve_count":37,"kev_count":11,"has_kev":16},{"version":112,"cve_count":37,"kev_count":11,"has_kev":16},{"version":114,"cve_count":37,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},{"version":188,"cve_count":37,"kev_count":11,"has_kev":16},{"version":190,"cve_count":11,"kev_count":11,"has_kev":16},{"version":192,"cve_count":11,"kev_count":11,"has_kev":16},{"version":194,"cve_count":11,"kev_count":11,"has_kev":16},{"version":196,"cve_count":11,"kev_count":11,"has_kev":16},{"version":198,"cve_count":11,"kev_count":11,"has_kev":16},[293,301,308,316,323,328,333,337,342,347],{"cveId":294,"description":295,"publishedDate":296,"cvssScore":297,"cvssVersion":298,"severity":299,"isKev":16,"epssScore":300},"CVE-2014-3007","Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.","2014-04-27",10,"v2","Critical",0.10356,{"cveId":302,"description":303,"publishedDate":304,"cvssScore":305,"cvssVersion":306,"severity":299,"isKev":16,"epssScore":307},"CVE-2016-4009","Integer overflow in the ImagingResampleHorizontal function in libImaging\u002FResample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.","2016-04-13",9.8,"v3.0",0.07871,{"cveId":309,"description":310,"publishedDate":311,"cvssScore":312,"cvssVersion":313,"severity":314,"isKev":16,"epssScore":315},"CVE-2021-27922","Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.","2021-03-03",7.5,"v3.1","High",0.04851,{"cveId":317,"description":318,"publishedDate":319,"cvssScore":320,"cvssVersion":298,"severity":321,"isKev":16,"epssScore":322},"CVE-2014-9601","Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.","2015-01-16",5,"Medium",0.04573,{"cveId":324,"description":325,"publishedDate":326,"cvssScore":305,"cvssVersion":313,"severity":299,"isKev":16,"epssScore":327},"CVE-2020-5311","libImaging\u002FSgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.","2020-01-03",0.04212,{"cveId":329,"description":330,"publishedDate":304,"cvssScore":331,"cvssVersion":306,"severity":321,"isKev":16,"epssScore":332},"CVE-2016-2533","Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.",6.5,0.04031,{"cveId":334,"description":335,"publishedDate":326,"cvssScore":305,"cvssVersion":313,"severity":299,"isKev":16,"epssScore":336},"CVE-2020-5312","libImaging\u002FPcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.",0.0369,{"cveId":338,"description":339,"publishedDate":340,"cvssScore":320,"cvssVersion":298,"severity":321,"isKev":16,"epssScore":341},"CVE-2014-3589","PIL\u002FIcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.","2014-08-25",0.03362,{"cveId":343,"description":344,"publishedDate":345,"cvssScore":305,"cvssVersion":313,"severity":299,"isKev":16,"epssScore":346},"CVE-2022-22817","PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used.","2022-01-10",0.03334,{"cveId":348,"description":349,"publishedDate":350,"cvssScore":305,"cvssVersion":313,"severity":299,"isKev":16,"epssScore":351},"CVE-2021-34552","Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.","2021-07-13",0.03188,[],{"title":354,"metaDescription":355,"keywords":356,"structuredData":357},"Pillow by Python - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Pillow by Python covering 91 versions with 54 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Pillow vulnerabilities, Pillow security, Pillow CVE, Python Pillow, Pillow threat intelligence, Python security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":358,"@type":359,"name":360,"description":355,"url":361,"manufacturer":362,"applicationCategory":366,"softwareVersion":367,"mainEntity":368},"https:\u002F\u002Fschema.org","SoftwareApplication","Pillow","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fpython\u002Fpillow",{"@type":363,"name":364,"url":365},"Organization","Python","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpython","Security Software","91 versions tracked",{"@type":369,"name":370,"description":371,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Pillow Security Vulnerabilities","Security vulnerabilities affecting Pillow by Python",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":373,"apiVersion":374},"2026-10-17T13:22:34.245Z","3.0",{"rows":376,"total":11,"capped":16,"failed":11},[],[]]