Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

The Hacker News - Oct 23, 2026

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

Read full article

MORE NEWS

Amadeus Explores Next-Generation Flight Search with NVIDIA

Oct 23, 2026

Amadeus Explores Next-Generation Flight Search with NVIDIA

Amadeus and NVIDIA have been collaborating to explore how accelerated computing and travel-specific AI could support faster, more scalable and more efficient flight search. Building on this work, the companies have now signed a Memorandum of Understanding (MoU) to deepen their collaboration and accelerate further exploration. As AI assistants increasingly search on behalf of travelers, they are changing both the volume and complexity of demand placed on travel technology.

The alarming reality of the worldwide website emergency: As a PHP weakness sparks a global cybersecurity alert, experts warn 'this is going to happen again'

Oct 23, 2026

The alarming reality of the worldwide website emergency: As a PHP weakness sparks a global cybersecurity alert, experts warn 'this is going to happen again'

A decades-old piece of software has sparked one of the biggest cyber-security alerts in recent memory after a hidden security flaw suddenly came to light.

Fund to help businesses switch to green vehicles

Oct 23, 2026

Fund to help businesses switch to green vehicles

Council leader Stephen Place says it will help businesses counter the rising cost of fuel.

Weather warnings in place ahead of Storm Boelo

Oct 23, 2026

Weather warnings in place ahead of Storm Boelo

The amber Met Office alert for counties Antrim and Londonderry lasts from 21:00 BST on Saturday until 21:00 GMT on Sunday.

Vivo Y600 with Guinness record-holding 10,000mAh battery to launch next week: Check date, design and expected specs

Oct 23, 2026

Vivo Y600 with Guinness record-holding 10,000mAh battery to launch next week: Check date, design and expected specs

Vivo Y600 5G will launch in China on October 30, featuring a massive 10,000mAh battery and a design revealed in white and blue colour options. The smartphone reportedly achieved a Guinness World Records title after completing a continuous livestream test lasting 32 hours and 37 minutes.

Scotland to be hit with 80mph wind gusts as Storm Boelo alert upgraded to amber

Oct 23, 2026

Scotland to be hit with 80mph wind gusts as Storm Boelo alert upgraded to amber

It is due to be the second of two storms to hit Scotland over the weekend, with Storm Austen bringing heavy rain on Friday.

Hunter's Moon 2026: When and how to watch October's full moon

Oct 23, 2026

Hunter's Moon 2026: When and how to watch October's full moon

Hunter’s Moon 2026: When and how to watch October’s full moonOctober 2026 full moon which is traditionally known as Hunter Moon is approaching to grace the skies over the weekend. Historically, the full moon got its specific name because of the timing and traditional hunting practices...

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Oct 23, 2026

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

Storm Austen hits UK as yellow wind warnings in effect

Oct 23, 2026

Storm Austen hits UK as yellow wind warnings in effect

Disruption to travel is likely as the season's first named storm brings a swathe of powerful winds to south-west England on Friday.

Summer 2026 was Europe's deadliest on record: Over 50,000 people died in urban areas - with climate change responsible for two thirds of deaths, study estimates

Oct 23, 2026

Summer 2026 was Europe's deadliest on record: Over 50,000 people died in urban areas - with climate change responsible for two thirds of deaths, study estimates

Scientists from Imperial College London predict that over 50,000 people died in urban areas across 30 countries, including the UK, as a result of extreme heat.

Air Canada App Named Best Airline App at 2026 World Aviation Festival

Oct 23, 2026

Air Canada App Named Best Airline App at 2026 World Aviation Festival

Air Canada’s mobile app has been named Best Airline App at the 2026 World Aviation Festival in Lisbon, winning the Battle of the Airline Apps. A panel of industry judges compared three airline finalists and rated Air Canada’s app the best. The judges highlighted the app’s ability to bring together the full travel journey in a single experience, helping customers move seamlessly from booking to arrival with personalised, contextual information throughout their trip.

Melanoma Vaccine Ushers in New Hope for Cancer Patients

Oct 23, 2026

Melanoma Vaccine Ushers in New Hope for Cancer Patients

Beyond melanoma, scientists are studying cancer vaccines for glioblastoma, pancreatic cancer and more.

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.