CVE-2021-25292

Description

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading

Vulnerability Details

Score

Score Vector

Affected Versions

pillow < 8.1.1

Severity

Ecosystem

Python

Publish Date

March 19, 2021

Modified Date

December 5, 2023