StackRadarChart IndexLive demo

PYSEC-2023-175

Unscored

Advisory

Published 20 Sept 2023In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 68; of 17,781 indexed, latest versions
Container images: 68; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 68 of 17,781 indexed charts deploy, on 68 images.

Affected package	Affected versions	Fixed in	Images
pillowpypi	2.6.1, 4.3.0, 5.0.0, 5.1.0+21 more	10.0.1	68

OSV records: PYSEC-2023-175

Charts affected

68 by stars

Chart

Latest

Affected images

Radar Score

seafilegeek-cookbook

1 of 1 See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	pillow@8.3.1	10.0.1

Open the chart page →

24,293

weblatehelm-charts-nr

1 of 3 See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	pillow@7.2.0	10.0.1

Open the chart page →

7,984

erpnextimprowised

1 of 3 See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
improwised/erpnext-worker :v13.4.1	97280b55cbd4	pillow@8.2.0	10.0.1

Open the chart page →

6,501

twitch-channel-points-minerjacobcolvin

1 of 1 See more

twitch-channel-points-miner jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
rdavidoff/twitch-channel-points-miner-v2 :1.8.6	7ae4c5135771	pillow@10.0.0	10.0.1

Open the chart page →

1,088

deconzjanip81-helm-charts

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	pillow@9.4.0	10.0.1

Open the chart page →

10,780

frigatek8s-home-lab-repo

1 of 1 See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.11.1	8330b0a265b8	pillow@8.1.2	10.0.1

Open the chart page →

2,370

exposureloglsst-sqre

1 of 1 See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
lsstsqre/exposurelog :0.8.0	79b00fb67a65	pillow@9.0.1	10.0.1

Open the chart page →

2,078

mlflowmondata-helm-charts

1 of 1 See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
mondata/mlflow :v2.3.0.s3.gc	6f94c6caf8bf	pillow@9.5.0	10.0.1

Open the chart page →

3,811

face-recognitionmoreillon

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
moreillon/face-recognition-fastapi :x86	bacb2ddd8394	pillow@8.4.0	10.0.1

Open the chart page →

8,556

1 of 4 See more

5,456

1 of 18 See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
ncsapolyglot/converters-ebook-convert :latest	438d82cdbdb5	pillow@5.2.0	10.0.1

Open the chart page →

55,726

splashntppool

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	pillow@5.4.1	10.0.1

Open the chart page →

27,633

seafilephybros-helm-charts

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	pillow@9.2.0	10.0.1

Open the chart page →

22,084

cupsr2dlan-helm-charts

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	pillow@9.4.0	10.0.1

Open the chart page →

7,685

weblateslamdev

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	pillow@5.4.1	10.0.1

Open the chart page →

8,694

frigatesmarthall

1 of 1 See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.12.0	c862771e38e8	pillow@8.1.2	10.0.1

Open the chart page →

2,243

krokiteochenglim

1 of 5 See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
yuzutech/kroki-blockdiag :0.16.0	7c1917c66d96	pillow@8.4.0	10.0.1

Open the chart page →

8,715

synapsetranhailong

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry PYSEC-2023-175.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.78.0	def97fd537d8	pillow@9.4.0	10.0.1

Open the chart page →

3,164

Container images carrying it

68 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
scrapinghub/splash :3.4.1	a5f89bc84606	pillow@5.4.1	10.0.1	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	pillow@9.3.0	10.0.1	1
seafileltd/seafile-mc :10.0.1	70628f29c663	pillow@9.3.0	10.0.1	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	pillow@9.2.0	10.0.1	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	pillow@8.3.1	10.0.1	1
tachyongroup/mlflow-deployment-controller-ui :mlflow-controller-0.1.8	f4f7fabe1037	pillow@9.4.0	10.0.1	1
taigaio/taiga-back :6.4.2	9f97323cc150	pillow@8.2.0	10.0.1	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	pillow@5.0.0	10.0.1	1
timothyclarke/wptserver :2018-03-08	40a80ced8031	pillow@2.6.1	10.0.1	1
vabene1111/recipes :1.0.5.2	ec4e9e2905b0	pillow@9.0.0	10.0.1	1
weblate/weblate :3.11.3-1	82848df56ecd	pillow@5.4.1	10.0.1	1
yuzutech/kroki-blockdiag :0.16.0	7c1917c66d96	pillow@8.4.0	10.0.1	1
ghcr.io/blakeblackshear/frigate :0.12.0	c862771e38e8	pillow@8.1.2	10.0.1	1
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	pillow@9.1.0	10.0.1	1
ghcr.io/linuxserver/mylar3 :version-v0.5.3	b96f0e97ab3f	pillow@6.2.2	10.0.1	1
ghcr.io/linuxserver/pyload :version-5de90278	d3c87933a5fd	pillow@6.2.2	10.0.1	1
ghcr.io/paperless-ngx/paperless-ngx :1.8.0	9bbc9a90641e	pillow@9.2.0	10.0.1	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	pillow@9.4.0	10.0.1	1