Vulnerabilities
Pillow Library Fixes Critical Ghostscript Argument Injection Flaw
A critical vulnerability in Python Pillow allows command injection via crafted filenames, resolved in version 13.0.0.
Pillow
Everything Threat Times has reported about Pillow: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical Heap Corruption in Pillow FlashPix Decoder Fixed in Version 13.0.0
A severe vulnerability in the Python Pillow library allows arbitrary code execution via crafted FlashPix files, addressed in the latest release.
Vulnerabilities
Critical Heap Overflow in Pillow Library Fixed in Version 13.0.0
A severe vulnerability in the Python imaging library Pillow allows heap buffer overflow and data disclosure when saving compressed TIFF files.