The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image files.
Crypto Briefing

OpenAI uncovers remote code execution flaw in Brotli compression library

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

The 'Sandbox' in AWS AgentCore is too convenient. How to choose between Code Interpreter and Harness to run Python without EC2

When building AI agents, it doesn't end with just "making the LLM think." You eventually want to execute some kind of program ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
GitHub

A diagnostic toolbox for Python applications that provides non-intrusive, low-overhead capabilities for online analysis.

PyFlightProfiler: A diagnostic toolbox for Python applications that provides non-intrusive, low-overhead capabilities for online analysis. - alibaba/PyFlightProfiler ...
Cybernews

Google's developer website had a remote code execution flaw worth $90,000

Google paid $90,000 after a DevSite flaw exposed a signing secret in a session cookie, enabling session forgery and remote code execution.