View all vulnerabilities

CVE-2022-22817

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
Score Vector
Affected Versions
pillow < 9.0.0
Severity
Ecosystem
Python
Publish Date
January 10, 2022
Modified Date
December 5, 2023