{"action":"Upgrade pillow to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0"}],"component":"pillow","cve_ids":["CVE-2014-1932"],"ecosystem":"PyPI","epss":0.00496,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-x895-2wrm-hvp7","id":"tcs_01M5KG62Z616FPVGCREKB44XCH","modified_at":"2026-06-10T17:02:54.675174686Z","published_at":"2014-04-17T14:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-22","http://www.openwall.com/lists/oss-security/2014/02/11/1","http://www.ubuntu.com/usn/USN-2168-1","https://github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059","http://lists.opensuse.org/opensuse-updates/2014-05/msg00002.html","http://www.securityfocus.com/bid/65511","https://security.gentoo.org/glsa/201612-52","https://github.com/advisories/GHSA-x895-2wrm-hvp7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-22","url":"https://osv.dev/vulnerability/PYSEC-2014-22"}],"summary":"The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (P"}