CVE:CVE-2022-22817
CNNVD:CNNVD-202201-634
Pillow是一款基于Python的图像处理库。
Pillow 9.0.0 之前存在安全漏洞，该漏洞源于 PIL.ImageMath.eval 允许评估任意表达式，例如使用 Python exec 方法的表达式。
solution:Upgrade python pillow to a higher version than 9.0.1,and avoid the version (,9.0.1); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0