Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...
LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw stolen AWS keys tested.
I loaded a large JSON file in Python and watched memory jump from 43 MB to 808 MB. Here’s what happened and how streaming changed everything.
Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
Our NER pipeline, despite its simplicity in setup, did a pretty good job.