Vulnerabilities
Pillow MIC Parsing Bug: CVE-2026-112390 Causes Infinite Loop in olefile-Enabled Apps
A flaw in the Python imaging library allows crafted files to hang worker threads, requiring an upgrade to version 13.0.0 for resolution.
Python
Everything SecOps Signal has reported about Python: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
aiohttp multipart flaw triggers resource exhaustion; patch CVE-2026-111066 in 3.14.4
Unauthenticated attackers can trigger resource exhaustion in aiohttp versions 2 through 3.14.3 via crafted multipart requests using Request.post().