Known vulnerabilities in pillow (Debian package) 5.4.1-2+deb10u1

Vendor: Debian
Version: 5.4.1-2+deb10u1
Software CPE: cpe:2.3:o:debian:pillow_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting pillow (Debian package) version 5.4.1-2+deb10u1 pillow (Debian package) 5.4.1-2+deb10u1 is affected by 3 vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817
CWE-749 High
No
No
5.4.1-2+deb10u3, 8.1.2+dfsg-0.3+deb11u1 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more
#VU60002 - Out-of-bounds read
CVE-2022-22816
CWE-125 Medium
No
No
5.4.1-2+deb10u3, 8.1.2+dfsg-0.3+deb11u1 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 33 more
#VU60001 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-22815
CWE-22 Medium
No
No
5.4.1-2+deb10u3, 8.1.2+dfsg-0.3+deb11u1 25.01.2022 SB2022012523
SB2022012526
SB2022102434
and 24 more