Vulnerabilities
Pillow CVE-2026-112897 leaks heap memory via crafted TIFF images
Uninitialised memory in Pillow versions before 13.0.0 is exposed as image pixels when processing specific TIFF files, allowing data disclosure.
Python
Everything RedTeam Log has reported about Python: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Claude Agent SDK Input Sanitization Failure Triggers Remote Code Execution Risk
Unvalidated inputs in the Claude Agent SDK for Python enable arbitrary command execution, bypassing permission controls before version 0.2.121.