Pillow Flaw Lets Filenames Run Code https://punkreport.sh/news/pillow-ghostscript-argument-injection/ Share Pillow Flaw Lets Filenames Run Code Crafted EPS filenames pass unchecked into Ghostscript calls, letting attackers inject arguments and execute commands on Python servers. @punkreport.bsky.social 2026-10-24T12:49:37.642000+00:00 at://did:plc:3vc6hdkcrzelvdqkumwp357n/app.bsky.feed.post/3mymq5rxydp2d