photovoltaic_systems

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Certifi removes GLOBALTRUST root certificate

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

PyTorch susceptible to local Denial of Service

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()

Pillow: TarIO negative size field causes infinite CPU-spin loop

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

urllib3 does not control redirects in browsers and Node.js

Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIER

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

certifi bundles emSign root CAs with compromised intermediate CA keys

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

pip Path Traversal vulnerability

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()

Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stack

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser