density-maps

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

AIOHTTP has CRLF injection through multipart part content type header construction

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

PyTorch susceptible to local Denial of Service

Pillow: TarIO negative size field causes infinite CPU-spin loop

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

AIOHTTP: Secure attribute not enforced for shared cookie

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

AIOHTTP vulnerable to brute-force leak of internal static file path components

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

aiohttp server lacks an initial request/header timeout

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

AIOHTTP's unicode processing of header values could cause parsing discrepancies

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

AIOHTTP: Connector pool exhaustion via Max-Age overflow

AIOHTTP vulnerable to denial of service through large payloads

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

pytest has vulnerable tmpdir handling

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()