Topic
Ghostscript
Latest news
- 23 OctCritical Pillow EPS flaw lets crafted images run OS commands
A vulnerability in the Pillow Python image library (CVE-2026-112900) allows execution of operating-system commands when opening specially crafted EPS files. The issue arises because Pillow passes the EPS filename to Ghostscript without validating it first, enabling command injection on servers that process untrusted images.
Security · 1 source

Articles
No articles about Ghostscript yet.