{"action":"Upgrade pillow to 8.2.0 or later.","affected":[{"fixed":"8.2.0","introduced":"0"}],"component":"pillow","cve_ids":["CVE-2021-28677"],"ecosystem":"PyPI","epss":0.02338,"exploited":false,"fixed_versions":["8.2.0"],"ghsa_id":"GHSA-q5hq-fp76-qmrc","id":"tcs_01M5KGFVJ6JZX6SCJQ00H40STV","modified_at":"2023-12-06T01:01:01.924504Z","published_at":"2021-06-02T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-93","https://github.com/python-pillow/Pillow/pull/5377","https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28677-fix-eps-dos-on-open","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/","https://github.com/advisories/GHSA-q5hq-fp76-qmrc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-93","url":"https://osv.dev/vulnerability/PYSEC-2021-93"}],"summary":"An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \\r and \\n as line endings. It used an accidentally qu"}