{"action":"Upgrade pillow to 9.0.0 or later.","affected":[{"fixed":"9.0.0","introduced":"0"}],"component":"pillow","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["9.0.0"],"ghsa_id":"GHSA-4fx9-vc88-q2xc","id":"tcs_01M5KEY2VH6EXB885HEQZK366A","modified_at":"2024-12-05T05:35:12.297192Z","published_at":"2022-03-11T23:39:27Z","references":["https://osv.dev/vulnerability/GHSA-4fx9-vc88-q2xc","https://github.com/python-pillow/Pillow/commit/baae9ec4b67c68e3adaf1208cf54e8de5e38a6fd","https://github.com/python-pillow/Pillow","https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#ensure-jpegimageplugin-stops-at-the-end-of-a-truncated-file"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-4fx9-vc88-q2xc","url":"https://osv.dev/vulnerability/GHSA-4fx9-vc88-q2xc"}],"summary":"Infinite loop in Pillow"}