A critical heap overflow in Pillow allows arbitrary memory writes via standard lossless JPEG files, enabling potential remote code execution for users of version 12.3.0 and earlier.
The Python imaging library releases version 13.0.0 to fix a critical argument injection vulnerability that allows attackers to execute arbitrary commands via crafted EPS files.
