| Package | Affected versions | Patched versions |
|---|---|---|
| pillow | < 10.0.1 | 10.0.1 |
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free