Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerabilidade Uncontrolled Resource Consumption #61

Open
vinisec opened this issue Oct 14, 2021 · 0 comments
Open

Vulnerabilidade Uncontrolled Resource Consumption #61

vinisec opened this issue Oct 14, 2021 · 0 comments
Labels
security

Comments

@vinisec
Copy link

vinisec commented Oct 14, 2021

Descreva a vulnerabilidade de segurança (se houver CVE, coloque como
referência)

CVE-2021-23437

The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

References
https://nvd.nist.gov/vuln/detail/CVE-2021-23437
python-pillow/Pillow@9e08eb8
https://pillow.readthedocs.io/en/stable/releasenotes/8.3.2.html
https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1319443
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNSG6VFXTAROGF7ACYLMAZNQV4EJ6I2C/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VKRCL7KKAKOXCVD7M6WC5OKFGL4L3SJT/

Classifique a prioridade de correção, de acordo com a severidade da
vulnerabilidade 30 dias
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@vinisec