Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image files.
More info