Selected post

Pillow Flaw Lets Filenames Run Code https://punkreport.sh/news/pillow-ghostscript-argument-injection/
Pillow Flaw Lets Filenames Run Code Crafted EPS filenames pass unchecked into Ghostscript calls, letting attackers inject arguments and execute commands on Python servers.