Vulnerabilities
Orgs urged to patch Pillow CVE-2026-112393 to stop TIFF code execution
A critical vulnerability in the Python Pillow library allows code execution via crafted TIFF files, with a fix available in version 13.0.0.
Python
Everything AppSec Scoop has reported about Python: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Unpatched Pillow flaws leak heap memory in image processing applications
A high severity vulnerability in Python Pillow allows attackers to extract sensitive data from server memory via crafted TIFF files.
Vulnerabilities
Pillow PDF flaw causes denial of service in Python applications
A high-severity vulnerability in Pillow allows attackers to exhaust resources via malformed PDFs, requiring an immediate update to version 13.0.0.
Vulnerabilities
Pillow memory exhaustion flaw risks service disruption for Python imaging workflows
A vulnerability in the Pillow library allows crafted GIFs to exhaust memory, affecting versions from 9.2.0 up to but excluding 13.0.0.
Vulnerabilities
Mercury framework flaw enables unauthenticated remote code execution
A critical vulnerability in the Mercury Python framework allows anonymous users to run arbitrary code on servers running versions prior to 3.2.6.