https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:54:58 +0000 https://vulnerability.circl.lu/vuln/bit-pillow-2021-28678 <p><strong>Affected:</strong> Bitnami: pillow</p> <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> <p><strong>Affected:</strong> Bitnami: pillow</p> <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> https://vulnerability.circl.lu/vuln/bit-pillow-2021-28678 https://vulnerability.circl.lu/vuln/cve-2021-28678 <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> https://vulnerability.circl.lu/vuln/cve-2021-28678 https://vulnerability.circl.lu/vuln/ghsa-hjfx-8p6c-g7gx <p><strong>Affected:</strong> PyPI: Pillow</p> <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> <p><strong>Affected:</strong> PyPI: Pillow</p> <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> https://vulnerability.circl.lu/vuln/ghsa-hjfx-8p6c-g7gx https://vulnerability.circl.lu/vuln/pysec-2021-94 <p><strong>Affected:</strong> PyPI: pillow</p> <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> <p><strong>Affected:</strong> PyPI: pillow</p> <p>An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.</p> https://vulnerability.circl.lu/vuln/pysec-2021-94