Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:43:47 +0000 CVE-2016-9190 https://vulnerability.circl.lu/vuln/cve-2016-9190 <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> https://vulnerability.circl.lu/vuln/cve-2016-9190 GHSA-w4vg-rf63-f3j3 — Arbitrary code using "crafted image file" approach affecting Pillow https://vulnerability.circl.lu/vuln/ghsa-w4vg-rf63-f3j3 <p><strong>Affected:</strong> PyPI: Pillow</p> <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> <p><strong>Affected:</strong> PyPI: Pillow</p> <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> https://vulnerability.circl.lu/vuln/ghsa-w4vg-rf63-f3j3 PYSEC-2016-9 https://vulnerability.circl.lu/vuln/pysec-2016-9 <p><strong>Affected:</strong> PyPI: pillow</p> <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> <p><strong>Affected:</strong> PyPI: pillow</p> <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> https://vulnerability.circl.lu/vuln/pysec-2016-9