—
PYSEC-2022-168
Quick fix
PYSEC-2022-168 — pillow: upgrade to the fixed version with the command below.
pip install --upgrade 'pillow>=9.0.1'Details
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Are you affected?
Enter the version of the package you're using.