pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

A flaw was found in Pillow. This vulnerability may allow an attacker to achieve arbitrary code execution when processing Encapsulated PostScript EPS images. Because Pillow invokes the external Ghostscript utility without properly sanitizing user-controlled input filenames, names beginning with...