Ghostscript

Critical Python Pillow Flaw Allows Code Execution Through Crafted Filenames

Pillow 13.0.0 fixes a filename-based Ghostscript command-execution flaw and several serious image-decoding vulnerabilities. Learn how CVE-2026-112900 works, when Python applications are exposed and how to secure image-processing services.