Tag
#Python
Stanza Lemmatizer RCE via Pickle Deserialization (CVE-2026-115878)
Stanza 1.14.0 loads an inner gzip pickle from a lemma checkpoint with no restriction, so a crafted model runs code; fixed in 1.15.0.
Nov 04, 2026
MLflow Unauthenticated RCE on Tracking Servers (CVE-2026-116692)
CVE-2026-116692 (CVSS 9.8) lets any caller of a default MLflow 3.12.0-3.16.x tracking server uplo...
Oct 28, 2026
Authlib JWS Signature Bypass, Fixed in 1.9.0 (CVE-2026-96760)
Authlib up to 1.8.0 treats a JWS JSON object with empty signatures as verified without checking t...
Oct 27, 2026
Pillow Ghostscript Argument Injection RCE (CVE-2026-112900)
Pillow 2.6.0 to 12.3.0 passes an attacker-controlled EPS or PostScript filename to Ghostscript un...
Oct 26, 2026
More tagged #Python
Pillow FlashPix Heap Overflow RCE (CVE-2026-112398)
Decoding a crafted FlashPix image in Pillow 12.3.0 or older with olefile installed lets an attacker run commands; Pillow 13.0.0 fixes CVE-2026-112398.
Oct 24, 2026
Automating Security Research: AI Engine Exploits Complex Blind Code Injection
Precision beats payload spray using Ostorlab's AI engine to systematically land RCE on Titiler and proves exfiltration without a single stack trace.
Sep 04, 2025
Strategies for writing super fast Python
In this article, we look at different ways to improve the performance of Python which is an interpreted language.
Apr 18, 2023
Python ProcessPoolExecutor: A Custom Process Pool
At Ostorlab we scan hundreds of Mobile Applications each day, each scan is very resource intensive but at the same time, since the beginning, we had to optimize the code for speed and maximize use of cloud resources.
Jul 18, 2016