Back to all news
Security

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

The Hacker News·October 23, 2026·1 min read
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

A critical flaw in Pillow, the popular Python image library, allows code execution via a crafted image. CVE-2026-112900 is in how Pillow handles EPS images, passing the file name to Ghostscript without checking it first, enabling an attacker to run operating system commands on a server.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store