{"action":"Upgrade pillow to 9.2.0 or later.","affected":[{"fixed":"9.2.0","introduced":"0"}],"component":"pillow","cve_ids":["CVE-2022-45198"],"ecosystem":"PyPI","epss":0.01303,"exploited":false,"fixed_versions":["9.2.0"],"ghsa_id":"GHSA-m2vv-5vj5-2hm7","id":"tcs_01M5KFPZJ8TYT0CZ3WK3SWGJ8F","modified_at":"2024-10-14T18:39:06.000592Z","published_at":"2022-11-14T12:00:15Z","references":["https://osv.dev/vulnerability/GHSA-m2vv-5vj5-2hm7","https://nvd.nist.gov/vuln/detail/CVE-2022-45198","https://github.com/python-pillow/Pillow/pull/6402","https://github.com/python-pillow/Pillow/pull/6402/commits/c9f1b35e981075110a23487a8d4a6cbb59a588ea","https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4","https://bugs.gentoo.org/855683","https://cwe.mitre.org/data/definitions/409.html","https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2022-42979.yaml","https://github.com/python-pillow/Pillow","https://github.com/python-pillow/Pillow/releases/tag/9.2.0","https://security.gentoo.org/glsa/202211-10"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m2vv-5vj5-2hm7","url":"https://osv.dev/vulnerability/GHSA-m2vv-5vj5-2hm7"}],"summary":"Pillow vulnerable to Data Amplification attack."}