https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:35:36 +0000 https://vulnerability.circl.lu/vuln/cve-2022-24303 <p>Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.</p> <p>Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.</p> https://vulnerability.circl.lu/vuln/cve-2022-24303 https://vulnerability.circl.lu/vuln/usn-5777-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: pillow, Ubuntu:22.04:LTS: pillow</p> <p>It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An attacker could possibly use this issue to delete arbitrary files. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-24303)</p> <p>It was discovered that Pillow incorrectly handled the decompression of highly compressed GIF data. An attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service. (CVE-2022-45198)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: pillow, Ubuntu:22.04:LTS: pillow</p> <p>It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An attacker could possibly use this issue to delete arbitrary files. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-24303)</p> <p>It was discovered that Pillow incorrectly handled the decompression of highly compressed GIF data. An attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service. (CVE-2022-45198)</p> https://vulnerability.circl.lu/vuln/usn-5777-1