Defined in 4 files
Last patched
_open in python-pillow/Pillow was changed by 10 published CVE fixes between 2016 and 2026, in 5 distinct patches that added or removed 45 lines in total.
The name occurs in 4 files: src/PIL/PsdImagePlugin.py, src/PIL/PcxImagePlugin.py, src/PIL/GdImageFile.py, PIL/PpmImagePlugin.py.
python-pillow/Pillow has 66 CVEs with a located fix in total, so 15% of them touched this function.
Every published CVE whose fix changed _open, newest first, with the lines each fix touched.
CVE-2026-55380 · src/PIL/GdImageFile.py · line 62 · +2 −0 in 2 hunks
CVE-2021-28677 · src/PIL/PsdImagePlugin.py · lines 122–123 · +2 −1
CVE-2021-28678 · src/PIL/PsdImagePlugin.py · lines 122–123 · +2 −1
CVE-2021-25288 · src/PIL/PsdImagePlugin.py · lines 122–123 · +2 −1
CVE-2021-25287 · src/PIL/PsdImagePlugin.py · lines 122–123 · +2 −1
CVE-2021-28676 · src/PIL/PsdImagePlugin.py · lines 122–123 · +2 −1
CVE-2020-35655 · src/PIL/PcxImagePlugin.py · lines 69–117 · +7 −2 in 2 hunks
CVE-2020-35653 · src/PIL/PcxImagePlugin.py · lines 69–117 · +7 −2 in 2 hunks
CVE-2016-9189 · PIL/PpmImagePlugin.py · line 126 · +0 −5
CVE-2016-9190 · PIL/PpmImagePlugin.py · line 126 · +0 −5
Get an alert when the next CVE fix lands in python-pillow/Pillow, with the patched functions.
Monitor Pillow CVEsFunctions in the same files that CVE fixes also changed.
Functions in python-pillow/Pillow changed by the most CVE fixes.
Common questions about CVE fixes to _open.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
