{"id":"CVE-2022-24303","aliases":["ALPINE-CVE-2022-24303","BIT-pillow-2022-24303","CLSA-2026-1792160910","DEBIAN-CVE-2022-24303","DLA-4462-1","EUVD-2022-0196","GHSA-9j59-75qj-795w","MGASA-2022-0166","OESA-2022-1540","OESA-2022-2086","PYSEC-2022-168","ROOT-APP-PYPI-CVE-2022-24303","UBUNTU-CVE-2022-24303","USN-5777-1","USN-5777-2","openSUSE-SU-2024:11814-1","openSUSE-SU-2025:14645-1"],"status":"published","title":"Path traversal in Pillow","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02691,"percentile":0.8601,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2022-02-26T11:04:49Z","modified":"2026-11-05T06:15:07Z","fixes":[{"ecosystem":"PyPI","package":"pillow","fixed_in":["9.0.1"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.15","package":"py3-pillow","fixed_in":["8.4.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"py3-pillow","fixed_in":["9.0.1-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"pillow","fixed_in":["9.0.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pillow","fixed_in":["9.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pillow","fixed_in":["9.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pillow","fixed_in":["9.0.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-pillow","fixed_in":["8.1.1-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"python-pillow","fixed_in":["8.1.1-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"python-pillow","fixed_in":["8.1.1-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"python-pillow","fixed_in":["9.0.1-2.oe2203"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"pillow","fixed_in":["8.1.2+aikido.1","8.2.0+aikido.1","9.0.0+aikido.1","9.0.0+aikido.2","7.0.0+aikido.2","7.0.0+aikido.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"pillow","fixed_in":["7.0.0-4ubuntu0.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pillow-python2","fixed_in":["6.2.1-3ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"py3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"pillow","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"9.0.1"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.4.0"},{"fixed":"8.4.0.post2+tuxcare"}]}],"versions":["8.4.0","8.4.0.post1+tuxcare"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2+dfsg-0.3+deb11u3"}]}],"versions":["8.1.2+dfsg-0.3","8.1.2+dfsg-0.3+deb11u1","8.1.2+dfsg-0.3+deb11u2"],"bundled":3},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.8.0","2.8.1","2.8.2","2.9.0","3.0.0","3.1.0","3.1.0.rc1","3.1.0rc1","3.1.1","3.1.2","3.2.0","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.4.1","3.4.2","4.0.0","4.1.0","4.1.1","4.2.0","4.2.1","4.3.0","5.0.0","5.1.0","5.2.0","5.3.0","5.4.0","5.4.0.dev0","5.4.1","6.0.0","6.1.0","6.2.0","6.2.1","6.2.2","7.0.0","7.1.0","7.1.1","7.1.2","7.2.0","8.0.0","8.0.1","8.1.0","8.1.1","8.1.2","8.2.0","8.3.0","8.3.1","8.3.2","8.4.0","9.0.0"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.0-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-2.oe2203"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.8.0","2.8.1","2.8.2","2.9.0","3.0.0","3.1.0","3.1.0.rc1","3.1.0rc1","3.1.1","3.1.2","3.2.0","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.4.1","3.4.2","4.0.0","4.1.0","4.1.1","4.2.0","4.2.1","4.3.0","5.0.0","5.1.0","5.2.0","5.3.0","5.4.0","5.4.0.dev0","5.4.1","6.0.0","6.1.0","6.2.0","6.2.1","6.2.2","7.0.0","7.1.0","7.1.1","7.1.2","7.2.0","8.0.0","8.0.1","8.1.0","8.1.1","8.1.2","8.2.0","8.3.0","8.3.1","8.3.2","8.4.0","9.0.0"]},{"source":"osv","ecosystem":"Root:PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2+aikido.1"},{"fixed":"8.2.0+aikido.1"},{"fixed":"9.0.0+aikido.1"},{"fixed":"9.0.0+aikido.2"},{"fixed":"7.0.0+aikido.2"},{"fixed":"7.0.0+aikido.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-4ubuntu0.7"}]}],"versions":["6.1.0-1","6.1.0-1build1","6.2.1-2","7.0.0-4","7.0.0-4build1","7.0.0-4ubuntu0.1","7.0.0-4ubuntu0.2","7.0.0-4ubuntu0.3","7.0.0-4ubuntu0.4","7.0.0-4ubuntu0.5","7.0.0-4ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pillow-python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-3ubuntu0.1~esm1"}]}],"versions":["6.2.1-3~build1","6.2.1-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-4ubuntu0.7"}]}],"versions":["6.1.0-1","6.1.0-1build1","6.2.1-2","7.0.0-4","7.0.0-4build1","7.0.0-4ubuntu0.1","7.0.0-4ubuntu0.2","7.0.0-4ubuntu0.3","7.0.0-4ubuntu0.4","7.0.0-4ubuntu0.5","7.0.0-4ubuntu0.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1ubuntu0.1"}]}],"versions":["8.1.2+dfsg-0.3","9.0.0-1","9.0.1-1","9.0.1-1build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pillow-python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-3ubuntu0.1~esm1"}]}],"versions":["6.2.1-3~build1","6.2.1-3"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.0-1.1"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"python","product":"pillow"}],"references":[{"url":"https://github.com/python-pillow/Pillow/pull/3450","tags":["x_transferred","Third Party Advisory","advisory","fix","web"]},{"url":"https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html#security","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W4ZUXPKEX72O3E5IHBPVY5ZCPMJ4GHHV/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XR6UP2XONXOVXI4446VY72R63YRO2YTP/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://security.gentoo.org/glsa/202211-10","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24303","tags":["web","advisory"]},{"url":"https://github.com/python-pillow/Pillow/commit/427221ef5f19157001bf8b1ad7cfe0b905ca8c26","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2022-168.yaml","tags":["web"]},{"url":"https://github.com/python-pillow/Pillow/pull/6010","tags":["web"]},{"url":"https://github.com/python-pillow/Pillow/commit/10c4f75aaa383bd9671e923e3b91d391ea12d781","tags":["web"]},{"url":"https://github.com/python-pillow/Pillow/commit/143032103c9f2d55a0a7960bd3e630cb72549e8a","tags":["web"]},{"url":"https://github.com/python-pillow/Pillow/blob/e8ab5640774716c5486d3cb05167f74f742ad6ef/CHANGES.rst?plain=1#L1172","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W4ZUXPKEX72O3E5IHBPVY5ZCPMJ4GHHV","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XR6UP2XONXOVXI4446VY72R63YRO2YTP","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9j59-75qj-795w","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-24303","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24303.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-24303","tags":["advisory"]},{"url":"https://github.com/python-pillow/Pillow","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2022-0166.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29887","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5227-1","tags":["advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5053","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CK3IGXU77EQTXZAYI2PTIAI4XLFS7AFP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JR2LTB6KTUEU7YVPJ5MHA2GHOIL2JQQE/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1540","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2086","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-24303","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5777-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5777-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-45198","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24303","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/44PI4DZ7YJFTM3VMZXVNEBF2OQQVHGKN/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30595","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-24303","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T00:00:00Z","modified":"2024-08-03T04:07:02.356Z","updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-0196","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T00:00:00Z","modified":"2024-08-03T04:07:02Z","updated_at":"2026-11-03T03:25:49.559039Z"}],"ghsa":[{"id":"GHSA-9j59-75qj-795w","title":"Path traversal in Pillow","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-11T23:10:32Z","modified":"2024-10-11T21:01:42Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"},{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:38:10.696798Z"}],"nvd":[{"id":"CVE-2022-24303","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T02:15:07.14Z","modified":"2026-06-17T04:31:35.093Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:14.24948Z"}],"osv":[{"id":"ALPINE-CVE-2022-24303","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T02:15:07.14Z","modified":"2026-11-03T07:31:14.524501787Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"DEBIAN-CVE-2022-24303","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T02:15:07.14Z","modified":"2026-11-03T08:01:27.05999129Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"GHSA-9j59-75qj-795w","title":"Path traversal in Pillow","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-11T23:10:32Z","modified":"2024-10-14T18:43:28.54908Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"},{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:43.875515Z"},{"id":"OESA-2022-1540","title":"python-pillow security update","description":"Python image processing library.\r\n\r\nSecurity Fix(es):\r\n\r\nPillow is a PIL (Python Imaging Library) fork. Affected versions of this package are vulnerable to Improper Input Validation. When the path to the temporary directory on Linux or macOS contained a space, this would break removal of the temporary image file after im.show() (and related actions), and potentially remove an unrelated file.(CVE-2022-24303)","status":"published","published":"2022-02-26T11:04:49Z","modified":"2026-08-18T01:16:21.69109743Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2086","title":"python-pillow security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nPillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.(CVE-2022-24303)","status":"published","published":"2022-11-11T11:05:24Z","modified":"2026-08-18T01:17:27.056294808Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2022-24303","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T02:15:00Z","modified":"2026-02-04T04:33:50.222177Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"BIT-pillow-2022-24303","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2024-03-06T11:02:21.3Z","modified":"2026-09-08T08:48:18.559903434Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"CLSA-2026-1792160910","title":"TuxCare security update for pillow (3 CVEs)","description":"TuxCare rebuilt pillow to address 3 CVEs. Fixed in 8.4.0.post2+tuxcare.","status":"published","published":"2026-10-16T14:28:26Z","modified":"2026-10-20T13:45:16.029742899Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CVE-2022-24303","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T00:00:00Z","modified":"2026-10-28T02:31:06.048801477Z","updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DLA-4462-1","title":"pillow - security update","status":"published","published":"2026-02-01T00:00:00Z","modified":"2026-02-01T04:30:13.308807Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2022-0166","title":"Updated python-pillow packages fix security vulnerability","description":"path_getbbox in path.c in Pillow before 9.0.0 improperly initializes\nImagePath.Path. (CVE-2022-22815)\npath_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read\nduring initialization of ImagePath.Path. (CVE-2022-22816)\nPIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary\nexpressions (CVE-2022-22817)\nPillow before 9.0.1 allows attackers to delete files because spaces in\ntemporary pathnames are mishandled. (CVE-2022-24303)\n","status":"published","published":"2022-05-12T10:24:45Z","modified":"2026-04-16T04:42:24.042979703Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11814-1","title":"python310-Pillow-9.0.1-1.1 on GA media","description":"These are all security issues fixed in the python310-Pillow-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:38:34.996493Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2025:14645-1","title":"python311-Pillow-11.1.0-1.1 on GA media","description":"These are all security issues fixed in the python311-Pillow-11.1.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-14T00:00:00Z","modified":"2026-02-04T02:24:58.148358Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"PYSEC-2022-168","description":"Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.","status":"published","published":"2022-03-28T02:15:00Z","modified":"2023-12-06T01:02:03.848876Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"ROOT-APP-PYPI-CVE-2022-24303","title":"CVE-2022-24303 in pillow - Patched by Root","description":"Root has patched CVE-2022-24303 in the pillow package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-11-05T05:49:19Z","modified":"2026-11-05T06:15:07.769648081Z","updated_at":"2026-11-05T07:10:31.343344Z"},{"id":"USN-5777-1","title":"pillow vulnerabilities","description":"It was discovered that Pillow incorrectly handled the deletion of temporary\nfiles when using a temporary directory that contains spaces. An attacker could\npossibly use this issue to delete arbitrary files. This issue only affected\nUbuntu 20.04 LTS. (CVE-2022-24303)\n\nIt was discovered that Pillow incorrectly handled the decompression of highly\ncompressed GIF data. An attacker could possibly use this issue to cause Pillow\nto crash, resulting in a denial of service. (CVE-2022-45198)\n","status":"published","published":"2022-12-13T10:06:51Z","modified":"2026-02-10T04:42:52Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5777-2","title":"pillow-python2 vulnerabilities","description":"USN-5777-1 fixed vulnerabilities in Pillow (Python 3). This update provides the\ncorresponding updates for Pillow (Python 2) in Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Pillow incorrectly handled the deletion of temporary\n files when using a temporary directory that contains spaces. An attacker could\n possibly use this issue to delete arbitrary files. This issue only affected\n Ubuntu 20.04 LTS. (CVE-2022-24303)\n \n It was discovered that Pillow incorrectly handled the decompression of highly\n compressed GIF data. An attacker could possibly use this issue to cause Pillow\n to crash, resulting in a denial of service. (CVE-2022-45198)\n","status":"published","published":"2022-12-14T09:15:09Z","modified":"2026-02-10T04:42:52Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}