[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f91WzJZlAsS9BEt35ba0suWynmEf8NcJroXfOlgpR8WI":3,"g5a-risk:CVE-2021-23437":154},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":42,"epssPercentile":25,"epssTimeSeries":43,"severity":45,"affectedProducts":46,"affectedProductsCount":60,"references":61,"referencesCount":94,"weaknesses":95,"weaknessesCount":104,"isActivelyExploited":105,"cisaInfo":25,"otxData":25,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":150,"notableEvents":151},"CVE-2021-23437","What is CVE-2021-23437?","The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.","2021-09-03T16:15:08.317","2024-03-22T11:15:45.353",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"report@snyk.io","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":16,"Type":17,"CVSSData":34,"BaseSeverity":39,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.0324,[44,44,44,44,42,42,42],0.0318,"High",[47,52,57],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"python","pillow","*","cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"fedoraproject","fedora","33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":58,"criteria":59,"vulnerable":4},"34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",3,[62,68,72,76,79,85,89],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9e08eb8f78fdfd2f476e1b20b7cf38683754866b","GitHub",[66,67],"Patch","Third Party Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F03\u002Fmsg00021.html","Debian",[],{"url":73,"source":74,"tags":75},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FRNSG6VFXTAROGF7ACYLMAZNQV4EJ6I2C\u002F","Fedoraproject",[],{"url":77,"source":74,"tags":78},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FVKRCL7KKAKOXCVD7M6WC5OKFGL4L3SJT\u002F",[],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F8.3.2.html","Readthedocs",[83,84],"Release Notes","Vendor Advisory",{"url":86,"source":87,"tags":88},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202211-10","Gentoo",[67],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fsnyk.io\u002Fvuln\u002FSNYK-PYTHON-PILLOW-1319443","Snyk",[93,66,83,67],"Exploit",7,[96],{"id":97,"name":98,"description":99,"extendedDescription":100,"status":101,"abstraction":102,"structure":103},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2021-23437? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-23437, a high severity cyber security vulnerability from 2021. The package pillow 5.2.0 and before 8.3.2 are vulnerable to...","CVE-2021-23437, CVE-2021-23437 vulnerability, CVE-2021-23437 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, python security, fedoraproject security, pillow vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2021-23437",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":9,"dateModified":10,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-23437","Cybersecurity","CVE-2021-23437, CVE-2021-23437 vulnerability, CVE-2021-23437 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133,142],{"Operator":25,"Negate":25,"Nodes":134},[135],{"Operator":136,"Negate":25,"CPEMatch":137},"OR",[138],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":139,"VersionStartExcluding":25,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":25},"F410ECFC-A2CC-41AD-965A-83B3FAE74EB2","5.2.0","8.3.2",{"Operator":25,"Negate":25,"Nodes":143},[144],{"Operator":136,"Negate":25,"CPEMatch":145},[146,148],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":147,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":149,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A930E247-0B43-43CB-98FF-6CE7B8189835",[],[],{"lastModified":10,"cacheTime":153,"version":35},1793232566894,{"score":155,"band":156,"action":157,"scoredAt":158},48,"Medium","Plan remediation","2026-10-28T06:51:47.959813+00:00"]