The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...

Serious vulnerability in Pillow, the standard Python image library. Risk of code execution via crafted filenames alone

IntroductionA critical vulnerability has been discovered in Pillow, the most widely used image library in Python. When ...
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Crypto Briefing

OpenAI uncovers remote code execution flaw in Brotli compression library

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
Cyber Security News

Unsloth Studio RCE Flaw Lets Malicious Hugging Face Models Execute Code

A patched Unsloth Studio flaw allowed malicious Hugging Face models to execute Python code when selected in the browser.
cyberpress

Critical Google DevSite Flaw Let Attackers Execute Remote Code Using Forged Flask Sessions

A critical vulnerability in Google’s shared DevSite platform allowed unauthenticated attackers to forge Flask session cookies ...

Could convenient Python code created with Claude Code be the cause of personal information leaks? Three terrifying security incidents that actually hap…

An era where anyone can create programs. But who protects their security?Since the arrival of Claude Code, the world of ...