Vulnerabilities
Python certifi Update Removes emSign Root Certificate in Critical Patch
A critical update for the Python certifi library removes the emSign root certificate. Organizations using affected versions must review their dependencies.
Python
Everything Patch Observer has reported about Python: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Organisations Urged to Patch Pillow 13.0.0 to Block Critical Arbitrary Code Execution Flaw CVE-2026-112398
A critical flaw in Pillow versions before 13.0.0 allows arbitrary code execution via crafted files, requiring immediate updates for exposed systems.
Vulnerabilities
Coze Studio Users Face High-Risk Command Execution Flaw Before 0.5.0
An insecure default in Coze Studio allows registered users to run unsandboxed code, risking API key theft and database access until version 0.5.0 is deployed.
Vulnerabilities
Orgs Urged to Patch Mercury 3.2.4 to Stop Terminal Shell Access via Missing Comma CVE-2026-111057
A missing comma in Mercury versions 3.0.0 through 3.2.3 allows attackers to access terminal shells. Version 3.2.4 resolves the critical vulnerability.
Vulnerabilities
Pillow Python Library Patch Fixes High-Severity Memory Access Flaw
A zero-width image processing error in Pillow versions before 13.0.0 allows attackers to crash applications. The vendor has released a fix for this high-severity vulnerability.
Vulnerabilities
aiohttp memory exhaustion flaw forces urgent Python patch upgrades for managed services
A high-severity flaw in aiohttp allows attackers to exhaust server resources via crafted requests, requiring immediate upgrades to version 3.14.4 for all exposed clients.