{"action":"Upgrade pillow to 6.2.0 or later.","affected":[{"fixed":"6.2.0","introduced":"0"}],"component":"pillow","cve_ids":["CVE-2019-16865"],"ecosystem":"PyPI","epss":0.03128,"exploited":false,"fixed_versions":["6.2.0"],"ghsa_id":"GHSA-j7mj-748x-7p78","id":"tcs_01M5KFNBMNCXQSXQCE76WEN9FZ","modified_at":"2024-10-09T21:24:53.635612Z","published_at":"2019-10-22T14:40:42Z","references":["https://osv.dev/vulnerability/GHSA-j7mj-748x-7p78","https://nvd.nist.gov/vuln/detail/CVE-2019-16865","https://github.com/python-pillow/Pillow/issues/4123","https://github.com/python-pillow/Pillow/commit/ab52630d0644e42a75eb88b78b9a9d7438a6fbeb","https://www.debian.org/security/2020/dsa-4631","https://usn.ubuntu.com/4272-1","https://ubuntu.com/security/notices/USN-4272-1","https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU","https://github.com/python-pillow/Pillow","https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2019-110.yaml","https://github.com/advisories/GHSA-j7mj-748x-7p78","https://access.redhat.com/errata/RHSA-2020:0694","https://access.redhat.com/errata/RHSA-2020:0683","https://access.redhat.com/errata/RHSA-2020:0681","https://access.redhat.com/errata/RHSA-2020:0580","https://access.redhat.com/errata/RHSA-2020:0578","https://access.redhat.com/errata/RHSA-2020:0566"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-j7mj-748x-7p78","url":"https://osv.dev/vulnerability/GHSA-j7mj-748x-7p78"}],"summary":"DOS attack in Pillow when processing specially crafted image files"}