CVE-2021-27921

A flaw was found in python-pillow. Attackers can cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.

Mitigation

Disable the invoice generation feature to mitigate this vulnerability in Red Hat Quay.