
Pillow 13.0.0 fixes critical image-handling flaws, including EPS code execution
CVE-2026-112900 affects Pillow 2.6.0 through 12.3.0 when Ghostscript is installed; none of the flaws is known to be under attack.
2 stories, newest first · one card per story

CVE-2026-112900 affects Pillow 2.6.0 through 12.3.0 when Ghostscript is installed; none of the flaws is known to be under attack.
The October 21 note points to release notes and GitHub advisories but names no CVE ids or affected ranges.
Today 37 readers · 37 views · 29 reads · all time 158K views