CVE-2023-44271

Advisory

Pytorch-lattice version 0.2.0 updates its Pillow dependency to versions >=10.2 and <11.0 to address security concerns highlighted by CVE-2023-44271.
https://github.com/willbakst/pytorch-lattice/pull/14/commits/a310f10cb11b57c1b1c0ac6583b47218128bef90

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Learned Interiors functionality for numerical calibrators by brianpark0126 in https://github.com/willbakst/pytorch-lattice/pull/9
* Implementation of RTL layer by brianpark0126 in https://github.com/willbakst/pytorch-lattice/pull/4
* fix: dependency on pillow with vulnerability by willbakst in https://github.com/willbakst/pytorch-lattice/pull/14


**Full Changelog**: https://github.com/willbakst/pytorch-lattice/compare/v0.1.0...v0.2.0

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44271