—
PYSEC-2021-317
Quick fix
PYSEC-2021-317 — pillow: upgrade to the fixed version with the command below.
pip install --upgrade 'pillow>=9e08eb8f78fdfd2f476e1b20b7cf38683754866b'Details
The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/pillow
Introduced in:
0Fixed in: 9e08eb8f78fdfd2f476e1b20b7cf38683754866bFix
pip install --upgrade 'pillow>=9e08eb8f78fdfd2f476e1b20b7cf38683754866b'