{"id":"ROOT-APP-PYPI-CVE-2023-4863","summary":"CVE-2023-4863 in pillow - Patched by Root","details":"Root has patched CVE-2023-4863 in the pillow package for Root:PyPI. Multiple fixed versions available.","modified":"2026-08-31T13:30:07.233136344Z","published":"2026-08-31T12:27:51Z","upstream":["CVE-2023-4863"],"database_specific":{"distro_version":"","severity":"HIGH","source":"Root","distro":"pypi"},"affected":[{"package":{"name":"pillow","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.0+aikido.1"},{"fixed":"9.3.0+aikido.1"},{"fixed":"9.3.0+aikido.2"},{"fixed":"9.5.0+aikido.2"},{"fixed":"9.3.0+aikido.3"},{"fixed":"9.5.0+aikido.3"},{"fixed":"9.3.0+aikido.4"},{"fixed":"9.5.0+aikido.4"},{"fixed":"9.3.0+aikido.5"},{"fixed":"9.5.0+aikido.5"},{"fixed":"9.3.0+aikido.6"},{"fixed":"9.5.0+aikido.6"},{"fixed":"9.5.0+aikido.7"},{"fixed":"9.3.0+aikido.7"},{"fixed":"9.3.0+aikido.8"},{"fixed":"9.3.0+aikido.9"},{"fixed":"9.3.0+aikido.10"},{"fixed":"9.3.0+aikido.11"},{"fixed":"9.5.0+aikido.8"},{"fixed":"9.5.0+aikido.9"},{"fixed":"9.5.0+aikido.10"},{"fixed":"9.3.0+aikido.12"},{"fixed":"9.5.0+aikido.11"},{"fixed":"9.3.0+aikido.13"},{"fixed":"9.3.0+aikido.14"},{"fixed":"9.5.0+aikido.12"},{"fixed":"9.3.0+aikido.15"},{"fixed":"9.3.0+aikido.16"}]}],"database_specific":{"root_patched":true,"total_fixed_versions":28,"upstream_version":"9.3.0","source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2023-4863.json","all_fixed_versions":["9.5.0+aikido.1","9.3.0+aikido.1","9.3.0+aikido.2","9.5.0+aikido.2","9.3.0+aikido.3","9.5.0+aikido.3","9.3.0+aikido.4","9.5.0+aikido.4","9.3.0+aikido.5","9.5.0+aikido.5","9.3.0+aikido.6","9.5.0+aikido.6","9.5.0+aikido.7","9.3.0+aikido.7","9.3.0+aikido.8","9.3.0+aikido.9","9.3.0+aikido.10","9.3.0+aikido.11","9.5.0+aikido.8","9.5.0+aikido.9","9.5.0+aikido.10","9.3.0+aikido.12","9.5.0+aikido.11","9.3.0+aikido.13","9.3.0+aikido.14","9.5.0+aikido.12","9.3.0+aikido.15","9.3.0+aikido.16"],"root_patch_version":"aikido.16"}},{"package":{"name":"rootio-pillow","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.0+root.io.1"},{"fixed":"9.3.0+root.io.1"},{"fixed":"9.3.0+root.io.2"},{"fixed":"9.5.0+root.io.2"},{"fixed":"9.3.0+root.io.3"},{"fixed":"9.5.0+root.io.3"},{"fixed":"9.3.0+root.io.4"},{"fixed":"9.5.0+root.io.4"},{"fixed":"9.3.0+root.io.5"},{"fixed":"9.5.0+root.io.5"},{"fixed":"9.3.0+root.io.6"},{"fixed":"9.5.0+root.io.6"},{"fixed":"9.5.0+root.io.7"},{"fixed":"9.3.0+root.io.7"},{"fixed":"9.3.0+root.io.8"},{"fixed":"9.3.0+root.io.9"}]}],"database_specific":{"all_fixed_versions":["9.5.0+root.io.1","9.3.0+root.io.1","9.3.0+root.io.2","9.5.0+root.io.2","9.3.0+root.io.3","9.5.0+root.io.3","9.3.0+root.io.4","9.5.0+root.io.4","9.3.0+root.io.5","9.5.0+root.io.5","9.3.0+root.io.6","9.5.0+root.io.6","9.5.0+root.io.7","9.3.0+root.io.7","9.3.0+root.io.8","9.3.0+root.io.9"],"root_patch_version":"root.io.9","root_patched":true,"total_fixed_versions":16,"upstream_version":"9.3.0","source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2023-4863.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}