How many Python pillow CVEs are in CISA KEV?

None of Python pillow's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Python pillow are affected?

68 distinct Python pillow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Python pillow CVEs?

Python pillow's CVEs most often map to these CWE weakness types: CWE-789 (Memory Allocation with Excessive Size Value), CWE-190 (Integer Overflow or Wraparound), CWE-787 (Out-of-bounds Write), CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop')).

How many critical Python pillow vulnerabilities are there?

Python pillow has 10 critical and 51 high-severity CVEs.

What is the average severity of Python pillow CVEs?

The average CVSS base score across Python pillow's scored CVEs is 8.0.

Python pillow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Python pillow vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Python pillow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Python pillow has 73 published CVE records since 2014, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 13 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Python pillow, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Python pillow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical10

High51

Medium12

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Python pillow's CVEs are currently listed in CISA's KEV catalog.

Public exploits

13 of Python pillow's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Python pillow version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 12.3.09 CVEs
< 8.1.18 CVEs
< 8.2.06 CVEs
< 6.2.25 CVEs
< 7.1.04 CVEs
<= 3.1.04 CVEs
< 8.1.02 CVEs
< 9.0.02 CVEs
< 9.0.12 CVEs
<= 2.3.02 CVEs
<= 3.3.12 CVEs
10.3.0 <= v < 12.2.02 CVEs

Common weakness types

The CWE weakness categories most often found in Python pillow CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Python pillow CVEs were published each year.

2014

2015

2016

2017

2019

2020

2021

Other Python products

Browse vulnerabilities for other products by Python.

cpython170 CVEs python147 CVEs urllib319 CVEs requests7 CVEs setuptools5 CVEs black3 CVEs keyring3 CVEs tarfile module3 CVEs

All Python vulnerabilities

Frequently asked questions

Common questions about Python pillow vulnerabilities.

How many CVEs does Python pillow have?: Python pillow has 73 published CVE records since 2014.
How many Python pillow CVEs are in CISA KEV?: None of Python pillow's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Python pillow vulnerabilities?: Yes — 13 of Python pillow's CVEs have a known public exploit.
Which versions of Python pillow are affected?: 68 distinct Python pillow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Python pillow CVEs?: Python pillow's CVEs most often map to these CWE weakness types: CWE-789 (Memory Allocation with Excessive Size Value), CWE-190 (Integer Overflow or Wraparound), CWE-787 (Out-of-bounds Write), CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop')).
How many critical Python pillow vulnerabilities are there?: Python pillow has 10 critical and 51 high-severity CVEs.
What is the average severity of Python pillow CVEs?: The average CVSS base score across Python pillow's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Python pillow vulnerabilities

Monitor new Python pillow vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing