https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T11:35:36.652841+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-24303 CVE-2022-24303 2026-10-03T11:35:36.976537+00:00

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

 https://vulnerability.circl.lu/vuln/usn-5777-1 USN-5777-1 — pillow vulnerabilities 2026-10-03T11:35:36.976633+00:00

Affected: Ubuntu:20.04:LTS: pillow, Ubuntu:22.04:LTS: pillow

It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An attacker could possibly use this issue to delete arbitrary files. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-24303)

It was discovered that Pillow incorrectly handled the decompression of highly compressed GIF data. An attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service. (CVE-2022-45198)