Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Vulnerabilities in the Pillow library may allow operating-system command execution or process crashes through a malicious file or filename. Pillow 13.0.0 fixes the described issues. The source states that none of the flaws is known to be under attack.