Vulnerabilities
Pillow PDF Append Flaw Triggers RecursionError in Python Services
A high-severity vulnerability in Pillow allows crafted PDFs to exhaust resources during append operations, risking denial of service for affected Python applications.
Python
Everything Firewall Chronicle has reported about Python: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Python certifi Critical Patch Strips Root Certificates from Trust Store in Oct 2026 Update
The Python certifi package issued a critical update on Oct 20, 2026, to remove root certificates from its trust store.
Vulnerabilities
Pillow Rank Filter Crash in Zero-Size Images Fixed in 13.0.0
A high-severity flaw in older Pillow versions causes native crashes when processing zero-size images with rank-based filters, resolved in the latest release.
Vulnerabilities
aiohttp high-severity resource exhaustion flaws patched in 3.14.4 release
Attackers can trigger unbounded memory or CPU usage via crafted requests to aiohttp servers running versions prior to 3.14.4.
Vulnerabilities
SGLang Sandbox Escape in Dumper Endpoint Enables Remote Code Execution
A critical code injection flaw in SGLang versions up to 0.5.22 allows unauthenticated attackers to execute arbitrary Python code via the scheduler process.