Everything Shell Bulletin has reported about Python: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical heap buffer overflow in Pillow versions before 13.0.0 allows remote code execution when saving compressed TIFF files to memory buffers.
A critical flaw in older joserfc versions allows attackers to forge digital signatures without keys, risking data integrity for users of the Python library.
Small businesses using AWS Bedrock development tools must verify import sources after AWS disclosed injection flaws in its starter toolkit.