AI

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Certifi removes GLOBALTRUST root certificate

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Werkzeug safe_join() allows Windows special device names

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

urllib3 streaming API improperly handles highly compressed data

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Pillow: TarIO negative size field causes infinite CPU-spin loop

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

urllib3 does not control redirects in browsers and Node.js

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

AnyIO process-pool workers can block indefinitely on undrained stderr

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Flask session does not add `Vary: Cookie` header when accessed in some ways

certifi bundles emSign root CAs with compromised intermediate CA keys

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

pytest has vulnerable tmpdir handling

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Flask-CORS improper regex path matching vulnerability

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

flask-cors vulnerable to log injection when the log level is set to debug

Werkzeug safe_join() allows Windows special device names with compound extensions

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Pillow: Heap buffer overflow in ImagingJpegDecode

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Flask-CORS allows for inconsistent CORS matching

Requests vulnerable to .netrc credentials leak via malicious URLs

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch