The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Crypto Briefing

OpenAI uncovers remote code execution flaw in Brotli compression library

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Serious vulnerability in Pillow, the standard Python image library. Risk of code execution via crafted filenames alone

IntroductionA critical vulnerability has been discovered in Pillow, the most widely used image library in Python. When ...
techtarget

Developers targeted by poisoned Python library

A routine instance of domain expiration kicked off a chain of events that could possibly be placing hundreds of companies at risk of massive data breach by way of a forgotten Python code library.

Identifying standard library APIs removed in Python 3.15 from your code using AST—502 public name differences and a comparison with ruff, pyupgrade, and ver…

Python 3.15.0 was released on October 9, 2026. The "Removed" section of the official "What's New in Python 3.15" document ...
Science Daily

Future of brain-inspired AI as Python code library passes major milestone

An open source code library for brain-inspired deep learning, called 'snnTorch,' has surpassed 100,000 downloads and is used in a wide variety of projects. A new paper details the code and offers a ...