| Package | Affected versions | Patched versions |
|---|---|---|
| pillow | < 8.1.1< 8.1.2 | 8.1.18.1.2 |
| pillow | < 8.1.1 | 8.1.1 |
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free