View all vulnerabilities

CVE-2022-45198

Pillow vulnerable to Data Amplification attack.

Description

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
7.5
Score Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Versions
pillow < 9.2.0
Severity
High
High
High
Ecosystem
Python
Publish Date
November 14, 2022
Modified Date
October 14, 2024