Security Advisories

CGA-xqwq-8jqj-g28p

Published

Last updated

https://images.chainguard.dev/security/CGA-xqwq-8jqj-g28p

Package

py3-seaborn

Latest Update

Fixed

Fixed Version

0.13.2-r0

Aliases

Severity

8.1

High

CVSS V3

Summary

Arbitrary Code Execution in Pillow

Description

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-xqwq-8jqj-g28p

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources