•SiTech AI Team
Critical Pillow Image Library Flaw Allows Code Execution via Crafted EPS Filename
Pillow's EPS handling flaw lets attackers run code by controlling the filename; CVE-2026-112900 affects versions 2.6.0-12.3.0 and is fixed in 13.0.0 (Oct 16). Upgrade and block untrusted EPS uploads.