Image.paste/Image.crop/Image.alpha_composite of the component APIs. The manipulation of the argument Coordinate results in out-of-bounds write.This vulnerability was named CVE-2026-59199. The attack may be performed from remote. There is no available exploit.
SOCIAL SHARE CARD GENERATOR