#pillow
-
Critical Pillow Flaw Turns a Filename Into Command Execution
Python's most popular image library could be made to run commands on a server simply by the name given to an EPS file it was asked to open. The fix landed in version 13.0.0.