Fixed in Pillow 13.0.0 Advisory
pip install --upgrade "Pillow>=13.0.0"
Health inspection
C
PyPI packages
4 criticals on the rail
Inspected live by pwned.coffee
What the inspector found
-
Pillow Argument Injection in Ghostscript call, potentially leading into RCE -
Pillow Multi-frame loaders can reuse stale native image storage after mode transitions Fixed in Pillow 13.0.0 Advisorypip install --upgrade "Pillow>=13.0.0" -
Pillow Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO Fixed in Pillow 13.0.0 Advisorypip install --upgrade "Pillow>=13.0.0" -
Pillow Heap buffer overflow in ImagingJpegDecode Fixed in Pillow 13.0.0 Advisorypip install --upgrade "Pillow>=13.0.0"
How grades work
- FSomething is exploited and has no fix.
- DSomething is exploited, but a fix exists.
- CSomething has no fix yet, or three or more criticals are on the rail.
- BHigh or critical fixes are waiting to be carried.
- ANothing serious on the rail.
Put it on your README:
[](https://pwned.coffee/grade/pypi)