How many PyPI pillow CVEs are in CISA KEV?

None of PyPI pillow's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of PyPI pillow are affected?

140 distinct PyPI pillow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in PyPI pillow CVEs?

PyPI pillow's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-20 (Improper Input Validation).

How many critical PyPI pillow vulnerabilities are there?

PyPI pillow has 4 critical and 12 high-severity CVEs.

What is the average severity of PyPI pillow CVEs?

The average CVSS base score across PyPI pillow's scored CVEs is 8.2.

PyPI pillow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: PyPI pillow vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

PyPI pillow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

PyPI pillow has 18 published CVE records since 2014, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

Severity and exploitation

How the CVSS severity of PyPI pillow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High12

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of PyPI pillow's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4 of PyPI pillow's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every PyPI pillow version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.017 CVEs
1.217 CVEs
1.7.717 CVEs
1.7.817 CVEs
2.0.017 CVEs
2.1.017 CVEs
2.2.017 CVEs
2.2.117 CVEs
2.3.017 CVEs
1.116 CVEs
1.316 CVEs
1.416 CVEs
1.5

Common weakness types

The CWE weakness categories most often found in PyPI pillow CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many PyPI pillow CVEs were published each year.

2014

2016

2020

2021

2022

2023

2025

Other PyPI products

Browse vulnerabilities for other products by PyPI.

tensorflow-cpu287 CVEs tensorflow-gpu287 CVEs tensorflow234 CVEs rdiffweb41 CVEs mlflow19 CVEs vyper16 CVEs modoboa13 CVEs matrix-synapse12 CVEs

All PyPI vulnerabilities

Frequently asked questions

Common questions about PyPI pillow vulnerabilities.

How many CVEs does PyPI pillow have?: PyPI pillow has 18 published CVE records since 2014.
How many PyPI pillow CVEs are in CISA KEV?: None of PyPI pillow's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for PyPI pillow vulnerabilities?: Yes — 4 of PyPI pillow's CVEs have a known public exploit.
Which versions of PyPI pillow are affected?: 140 distinct PyPI pillow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in PyPI pillow CVEs?: PyPI pillow's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-20 (Improper Input Validation).
How many critical PyPI pillow vulnerabilities are there?: PyPI pillow has 4 critical and 12 high-severity CVEs.
What is the average severity of PyPI pillow CVEs?: The average CVSS base score across PyPI pillow's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track PyPI pillow vulnerabilities

Get an alert for each new PyPI pillow CVE, with AI-written analysis and remediation steps.

Create an account See pricing

PyPI pillow Vulnerabilities