CVE-2021-23437

Publication date

2021-09-03 16:10:10

Family

snyk

State

PUBLISHED

Description

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.