All py2 versions of pillow are vulnerable. Can we either remove old mythplugins or mask USE=mytharchive on them?
Closed by commit bca2f375ef6faf22073a994bebf5fa6aee9f3c0a