[Snyk: High] Integer Overflow (Due: 2/22/2020)

[hcaofec]

Vulnerable module: Pillow
Introduced through: wagtail@2.2.1
Exploit maturity: No known exploit
Fixed in: 6.2.2
Detailed paths and remediation
Introduced through: project@0.0.0 › wagtail@2.2.1 › Pillow@5.4.1
Remediation: Pin Pillow to version 6.2.2
Overview
pillow is a PIL fork.

Affected versions of this package are vulnerable to Integer Overflow in libImaging/TiffDecode.c when decoding TIFF files.

[pkfec]

Pillow pkg is also updated to v6.2.2. Wagtail is updated to LTS v2.7 in PR #3563.
PR #3563 is merged. Closing this issue.