Tue, Oct 20 Vulnerabilities and patches
- Public exploit
Pillow image library flaw that may allow code execution has a public exploit
Apps that save an attacker’s crafted image as compressed TIFF to an in-memory file such as BytesIO are exposed from 2.0.0 until 13.0.0, which fixes it.