Known vulnerabilities in python3-pillow-tk

Vendor: OpenAnolis
Software: python3-pillow-tk
Software CPE: cpe:2.3:o:openanolis:python3-pillow-tk:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python3-pillow-tk python3-pillow-tk is affected by 20 known vulnerabilities: 5 high, 15 medium Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137009 - Resource exhaustion
CVE-2026-59200		 CWE-400 Medium
No
No
 12.2.0-3 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU137008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59203		 CWE-835 Medium
No
No
 12.2.0-3 07.07.2026 SB2026070342
SB2026072428
#VU137007 - Allocation of Resources Without Limits or Throttling
CVE-2026-59204		 CWE-770 Medium
No
No
 12.3.0-1 07.07.2026 SB2026070342
SB2026071741
SB2026072516
and 6 more
#VU137006 - Out-of-bounds read
CVE-2026-54058		 CWE-125 High
No
No
 5.1.1-23, 12.2.0-3 07.07.2026 SB2026070342
SB2026071741
SB2026071949
and 12 more
#VU137005 - Heap-based Buffer Overflow
CVE-2026-59197		 CWE-122 High
No
No
 5.1.1-23, 12.3.0-1 07.07.2026 SB2026041113
SB2026071741
SB2026071949
and 12 more
#VU137004 - Out-of-bounds read
CVE-2026-59198		 CWE-125 Medium
No
No
 12.2.0-3 07.07.2026 SB2026041113
SB2026071741
SB2026072428
and 6 more
#VU137003 - Heap-based Buffer Overflow
CVE-2026-59199		 CWE-122 Medium
No
No
 12.2.0-3 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU137002 - Heap-based Buffer Overflow
CVE-2026-59205		 CWE-122 Medium
No
No
 12.2.0-3 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU136860 - Uncontrolled Memory Allocation
CVE-2026-55379		 CWE-789 Medium
No
No
 5.1.1-22, 12.3.0-1 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU136859 - Uncontrolled Memory Allocation
CVE-2026-54059		 CWE-789 Medium
No
No
 5.1.1-22, 12.3.0-1 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU136858 - Uncontrolled Memory Allocation
CVE-2026-54060		 CWE-789 Medium
No
No
 5.1.1-22, 12.3.0-1 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU136857 - Uncontrolled Memory Allocation
CVE-2026-55380		 CWE-789 Medium
No
No
 5.1.1-22, 12.2.0-2 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU127176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42310		 CWE-835 Medium
No
No
 12.2.0-1 23.04.2026 SB2026041113
SB2026061950
SB2026061951
and 5 more
#VU127175 - Integer overflow
CVE-2026-42308		 CWE-190 Medium
No
No
 10.3.0-4 23.04.2026 SB2026041113
SB2026061950
SB2026061951
and 5 more
#VU125817 - Resource exhaustion
CVE-2026-40192		 CWE-400 Medium
No
No
 10.3.0-3 11.04.2026 SB2026041113
SB2026041807
SB2026041808
and 8 more
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 10.3.0-2 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 5.1.1-21, 10.3.0-1 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more
#VU85743 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-50447		 CWE-94 High
No
No
 5.1.1-19, 10.2.0-1 24.01.2024 SB2024012413
SB2024012417
SB2024012465
and 34 more
#VU83261 - Resource exhaustion
CVE-2023-44271		 CWE-400 Medium
No
No
 5.1.1-20, 10.1.0-1 18.11.2023 SB2023111809
SB2023111810
SB2023111811
and 25 more
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817		 CWE-749 High
No
No
 5.1.1-19, 10.2.0-1 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more