Tag: image library vulnerability

Pillow Image Library Flaw Exposes Code Execution Risk Via Crafted Images

A vulnerability in the Pillow image library, tracked as CVE-2026-112900, allows attackers to execute remote code by exploiting a weakness in EPS image filename verification, affecting versions from 2.6.0 to 12.3.0. This flaw was fixed in Pillow 13.0.0, released on October 16.