Pillow 13.0.0 fixes critical image-handling flaws, including EPS code execution
CVE-2026-112900 affects Pillow 2.6.0 through 12.3.0 when Ghostscript is installed; none of the flaws is known to be under attack.
Stories per day · 30 days
2 RSS
Relatedcve-2026-399191eps1heap-overflow1imagemagick1image-processing1pdf1pillow1postscript1python1remote-code-execution1sandbox-bypass1ubuntu1usn1wordpress1
7 stories, newest first · one card per story
Stories tagged #ghostscript
Ubuntu fixes Ghostscript code-execution flaws
Crafted PostScript or font files could bypass the sandbox or crash Ghostscript.
Ghostscript flaw lets hackers hijack servers via PDF uploads
Ghostscript heap overflow CVE-2026-39919 can enable remote code execution through crafted PDF uploads, with no exploitation seen yet.
9
Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server
Wordfence disclosed Ghostscript CVE-2026-39919, a CVSS 9.8 flaw fixed in 10.08.0, with lab PDF remote code execution.
12
Discourse ImageMagick Vulnerability Enables Arbitrary File Read Through Malicious Image Uploads
Researchers disclosed CVE-2026-55420, letting low-privilege Discourse users read server files via ImageMagick uploads.
7
Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
Searchlight Cyber showed a patched Discourse upload chain letting basic users read server files via ImageMagick.
5
USN-8791-1: Ghostscript vulnerability
A Ghostscript vulnerability in JPEG 2000 image processing could allow arbitrary code execution via crafted files.