pypi.org: pillow

Python Imaging Library (fork)

• Homepage: https://python-pillow.github.io
• Documentation: https://pillow.readthedocs.io
• Licenses: MIT-CMU
• Latest release: 12.3.0 (published about 2 months ago)
• Last Synced: 2026-08-23T09:00:55.567Z (about 14 hours ago)
• Versions: 108
• Dependent Packages: 4,378
• Dependent Repositories: 88,899
• Downloads: 566,501,168 Last month
• Docker Downloads: 814,528,772
• Rankings:
  • Dependent packages count: 0.006%
  • Downloads: 0.013%
  • Dependent repos count: 0.013%
  • Docker downloads count: 0.082%
  • Average: 0.188%
  • Stargazers count: 0.44%
  • Forks count: 0.576%
• Maintainers (4)
  • hugovk
  • aclark
  • wiredfool
  • radarhere
• Funding:
  • https://tidelift.com/subscription/pkg/pypi-pillow?utm_source=pypi-pillow&utm_medium=pypi
• Advisories:
  • Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
  • Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
  • Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
  • Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
  • Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
  • Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
  • Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
  • Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
  • Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
  • Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
  • Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
  • Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
  • Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
  • Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
  • Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
  • Pillow has an integer overflow when processing fonts
  • Pillow has a heap buffer overflow with nested list coordinates
  • FITS GZIP decompression bomb in Pillow
  • Pillow affected by out-of-bounds write when loading PSD images
  • Pillow vulnerability can cause write buffer overflow on BCn encoding
  • Pillow buffer overflow vulnerability
  • Arbitrary Code Execution in Pillow
  • Pillow Denial of Service vulnerability
  • Duplicate Advisory: Bundled libwebp in Pillow vulnerable
  • Pillow subject to DoS via SAMPLESPERPIXEL tag
  • Pillow vulnerable to Data Amplification attack.
  • Buffer over-flow in Pillow
  • Buffer Copy without Checking Size of Input in Pillow
  • Pillow command injection
  • Pillow Buffer overflow in Jpeg2KEncode.c
  • PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles
  • Pillow denial of service via PNG bomb
  • Pillow denial of service via Crafted Block Size
  • Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
  • Infinite loop in Pillow
  • Path traversal in Pillow
  • Improper Initialization in Pillow
  • Out-of-bounds Read in Pillow
  • Arbitrary expression injection in Pillow
  • PCX P mode buffer overflow in Pillow
  • Out-of-bounds read in Pillow
  • Integer overflow in Pillow
  • Buffer Overflow in Pillow
  • Uncontrolled Resource Consumption in pillow
  • Uncontrolled Resource Consumption in Pillow
  • Pillow Out-of-bounds Read vulnerability
  • Insufficient Verification of Data Authenticity in Pillow
  • Pillow denial of service
  • Out-of-bounds Read in Pillow
  • Potential infinite loop in Pillow
  • Uncontrolled Resource Consumption in pillow
  • Out of bounds read in Pillow
  • Regular Expression Denial of Service (ReDoS) in Pillow
  • Out-of-bounds Write in Pillow
  • Out of bounds read in Pillow
  • Out of bounds write in Pillow
  • Pillow Out-of-bounds Read
  • Pillow Out-of-bounds Read
  • Pillow Out-of-bounds Write
  • Pillow Uncontrolled Resource Consumption
  • Pillow Denial of Service by Uncontrolled Resource Consumption
  • Pillow Denial of Service by Uncontrolled Resource Consumption
  • Out-of-bounds reads in Pillow
  • Buffer overflow in Pillow
  • Out-of-bounds reads in Pillow
  • Out-of-bounds read in Pillow
  • Pillow Temporary file name leakage
  • Uncontrolled Resource Consumption in Pillow
  • Out-of-bounds Read in Pillow
  • DOS attack in Pillow when processing specially crafted image files
  • Pillow Integer overflow in ImagingResampleHorizontal
  • Pillow Buffer overflow in ImagingFliDecode
  • Pillow buffer overflow in ImagingPcdDecode
  • Pillow Integer overflow in Map.c
  • Pillow Buffer overflow in ImagingLibTiffDecode
  • Arbitrary code using "crafted image file" approach affecting Pillow

conda-forge.org: pillow

• Homepage: https://pillow.readthedocs.io/
• Licenses: HPND
• Latest release: 9.2.0 (published about 4 years ago)
• Last Synced: 2026-04-01T16:23:54.378Z (5 months ago)
• Versions: 43
• Dependent Packages: 383
• Dependent Repositories: 3,384
• Downloads: 70,113,017 Total
• Rankings:
  • Dependent repos count: 0.095%
  • Dependent packages count: 0.14%
  • Average: 1.442%
  • Forks count: 2.765%
  • Stargazers count: 2.77%

anaconda.org: pillow

Pillow is the friendly PIL fork. PIL is the Python Imaging Library, adds image processing capabilities to your Python interpreter.

• Homepage: https://python-pillow.github.io
• Licenses: HPND AND TCL
• Latest release: 12.3.0 (published about 1 month ago)
• Last Synced: 2026-07-14T10:03:56.442Z (about 1 month ago)
• Versions: 38
• Dependent Packages: 39
• Dependent Repositories: 3,384
• Downloads: 2,513,955 Total
• Rankings:
  • Dependent repos count: 0.575%
  • Dependent packages count: 0.756%
  • Average: 3.94%
  • Forks count: 7.199%
  • Stargazers count: 7.229%

proxy.golang.org: github.com/python-pillow/pillow

• Homepage:
• Status: removed
• Documentation: https://pkg.go.dev/github.com/python-pillow/pillow#section-documentation
• Licenses: other
• Latest release: v0.0.0-20260811132415-e7dfd90f3456 (published 12 days ago)
• Last Synced: 2026-08-22T21:34:18.983Z (1 day ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 4.494%
  • Average: 4.645%
  • Dependent repos count: 4.796%

pypi.org: pillov

Python Imaging Library (Fork)

• Homepage: https://python-pillow.org
• Documentation: https://pillov.readthedocs.io/
• Licenses: HPND
• Latest release: 10.0.1 (published almost 3 years ago)
• Last Synced: 2026-08-22T21:33:16.742Z (1 day ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Stargazers count: 0.17%
  • Forks count: 0.33%
  • Dependent packages count: 7.306%
  • Average: 19.068%
  • Dependent repos count: 68.466%
• Maintainers (1)
  • Grib
• Funding:
  • https://tidelift.com/subscription/pkg/pypi-pillow?utm_source=pypi-pillow&utm_medium=pypi

pypi.org: pillow-android

Python Imaging Library (fork)

• Homepage: https://python-pillow.github.io
• Documentation: https://pillow.readthedocs.io
• Licenses: MIT-CMU
• Latest release: 12.2.0 (published 2 months ago)
• Last Synced: 2026-08-22T21:33:17.145Z (1 day ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 37 Last month
• Rankings:
  • Dependent packages count: 7.058%
  • Average: 23.493%
  • Dependent repos count: 39.927%
• Maintainers (1)
  • ngzr666
• Funding:
  • https://tidelift.com/subscription/pkg/pypi-pillow?utm_source=pypi-pillow&utm_medium=pypi