Количество 7
Количество 7
GHSA-hjfx-8p6c-g7gx
Insufficient Verification of Data Authenticity in Pillow
CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.
CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.
CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.
CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImage ...
SUSE-SU-2024:1607-1
Security update for python-Pillow
RLSA-2021:4149
Moderate: python-pillow security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-hjfx-8p6c-g7gx Insufficient Verification of Data Authenticity in Pillow | CVSS3: 5.5 | 1% Низкий | около 5 лет назад |
 | CVE-2021-28678 An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data. | CVSS3: 5.5 | 1% Низкий | больше 5 лет назад |
 | CVE-2021-28678 An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data. | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
 | CVE-2021-28678 An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data. | CVSS3: 5.5 | 1% Низкий | больше 5 лет назад |
| CVE-2021-28678 An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImage ... | CVSS3: 5.5 | 1% Низкий | больше 5 лет назад |
 | SUSE-SU-2024:1607-1 Security update for python-Pillow | больше 2 лет назад | ||
 | RLSA-2021:4149 Moderate: python-pillow security update | почти 5 лет назад |
Уязвимостей на страницу