GCVE-VVD-MAGEIA-2021-448

Advisory Published

Vulnetix · Advisory published September 29, 2021

Updated python-pillow packages fix security vulnerability: The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function (CVE-2021-23437).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-pillow	0 (affected), 8.1.2-1.1.mga8 (unaffected)	—

References

Updated python-pillow packages fix security vulnerability

advisory

Updated python-pillow packages fix security vulnerability

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON