This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2022-24303 →
ALPINE-CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Original description
The description as published by the source.
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Alpine:v3.15
py3-pillow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-r3"}]}]
References
- advisory security.alpinelinux.org