The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Serious vulnerability in Pillow, the standard Python image library. Risk of code execution via crafted filenames alone

IntroductionA critical vulnerability has been discovered in Pillow, the most widely used image library in Python. When ...

A Critical Vulnerability in PHP. So, Is Python Safe? Thinking About the 'Free and Easy' Side and the Value of Commercial Software

The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...
Crypto Briefing

OpenAI uncovers remote code execution flaw in Brotli compression library

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
Hosted on MSN

Summarizing website in Claude code auto mode can compromise your machine; no fix planned

Security researcher Johann Rehberger has demonstrated that Claude Code's Auto Mode — marketed with a zero-percent prompt-injection attack success rate from a commissioned third-party evaluation — is ...