CVE-2026-112900

Latest news

1. 23 Oct
   Critical Pillow EPS flaw lets crafted images run OS commands

   A vulnerability in the Pillow Python image library (CVE-2026-112900) allows execution of operating-system commands when opening specially crafted EPS files. The issue arises because Pillow passes the EPS filename to Ghostscript without validating it first, enabling command injection on servers that process untrusted images.

   Security · 1 source

   

Articles

No articles about CVE-2026-112900 yet.