Everything RedTeam Monitor has reported about Python: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical heap overflow in Pillow allows arbitrary memory writes via standard lossless JPEG files, enabling potential remote code execution for users of version 12.3.0 and earlier.
The Python imaging library releases version 13.0.0 to fix a critical argument injection vulnerability that allows attackers to execute arbitrary commands via crafted EPS files.
A critical vulnerability in the pypdftk library allows attackers to execute operating system commands by injecting shell metacharacters into file path arguments.
PraisonAI Agents version 1.6.78 fixes a critical flaw where the code execution sandbox failed to block access to environment variables containing sensitive credentials.