Issue #759

Pillow Flaw, JIT Removed, Security, and More

Nov. 3, 2026

Pillow Flaw, JIT Removed, Security, and More
#759 – NOVEMBER 3, 2026 VIEW IN BROWSER
The PyCoder’s Weekly Logo
Critical Flaw in Pillow Allows Code Execution
A critical flaw was found in Pillow, the popular image library. A specially crafted EPS file could result in code execution. Pillow 13.0.0 fixed this and several other issues. This post describes the release and exploit.
SWATI KHANDELWAI

Python’s Experimental JIT to Be Removed
PEP 836 has been withdrawn and the experimental JIT is to be removed from CPython’s main branch. This article talks about the JIT’s journey and what still may be in store.
JOE BROCKMEIER

CodeAF: 78% on DeepSWE with an Open Model
With DeepSeek V4.1 Flash, CodeAF fixed 88 of 113 GitHub issues on DeepSWE. Against Codex and eight other harnesses on one open model, it ranked #1 at the lowest cost per fix. CodeAF is an open-source coding harness built for open models, and works with closed models too. Star on GitHub
AGENTFIELDsponsor

Supply Chain Security for the Age of AI-Speed Exploits
Learn Python supply chain security as AI speeds up attacks: what the LiteLLM backdoor teaches, how to check your setup, and habits that last.
REAL PYTHON

Quiz: Supply Chain Security for the Age of AI-Speed Exploits
REAL PYTHON

Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 Released
PYTHON.ORG

Move Past the Chat Window With Codex CLI
If you’re still pasting code and tracebacks into a chat, let an agent work inside your project instead. Codex CLI runs in your terminal, reads your files, runs your tests, and follows the project rules you write in an AGENTS.md file. Over two live days on November 14–15, you’ll build a full Python CLI app this way, from an empty directory to GitHub.
REAL PYTHON


Articles & Tutorials


Google Adopts Pyrefly for Typechecking
Python is one of the primary languages at Google, powering everything from machine learning research to developer infrastructure and data pipelines. Replacing previous type-checking infrastructure with Pyrefly provided significant speedups for engineers and agents alike, while substantially reducing build-system compute resources.
GOOGLEBLOG.COM • Shared by anonymous

Polars 2.0: Streaming by Default and Stricter Types
Polars 2.0 makes lazy queries faster without code changes, but its new defaults can affect existing workflows. This article compares Polars 1.x and 2.0, covering streaming performance, spill-to-disk, changes to join ordering, and stricter type checking that catches silent precision loss.
OPENTEAMS.COM • Shared by Khuyen Tran

Django as a Simple Static Site Builder
Combining three libraries: nanodjango, django-nanopages, and django-distill, you can create a static site generator in just a few lines of code. Why learn another tool when you already know Django?
RADIAC

GPT-6.1 Terra Draws a Python Reading a Book
Explore GPT-6.1 Terra’s Python code, turtle drawing, and responses to small tasks that check modern syntax, release knowledge, focused edits, and made-up functions.
REAL PYTHON

Python vs Go: A Practical Comparison for Developers
This article looks at how Python and Go differ, what surveys say about the devs who use them, and what interviews say about the trade-offs between them.
DOMINIKA STANKIEWICZ

Python Typing Survey 2026 Results
This post summarizes the results of the 2026 Python Typing survey. Type hint use changed somewhat, but the choice of type checker has changed sharply.
FACEBOOK

13 Project Ideas for Intermediate Python Developers
Try 13 Python project ideas for intermediate developers. Build web, GUI, and command-line apps that challenge you and make you a better Pythonista.
REAL PYTHON

Three Ways of Storing and Accessing Lots of Images in Python
Compare three ways of storing images in Python, as PNG files on disk, in LMDB, and in HDF5, with timings for reading and writing lots of images.
REAL PYTHON

NumPy Tutorial: Your First Steps Into Data Science in Python
Follow this NumPy tutorial to learn how to create and manipulate arrays in Python and take your first steps into data science.
REAL PYTHON

Python on My Wrist
This blog post talks about reviving PineTime smartwatch running up-to-date MicroPython and wasp-os.
MICHIEL BEIJEN

Tachyon: Sampling Profiling in Python
Learn how to use Tachyon, Python’s sampling profiler.
RODRIGO GIRÃO SERRÃO


Projects & Code


Brought to you by Real Pythonsponsor
Online Python Training Created by Experts →

borb: Read, Create and Edit PDF Files in Python
GITHUB.COM/BORB-PDF

f1-race-replay: Interactive Formula 1 Race Visualisation
GITHUB.COM/IAMTOMSHAW

quarantine: Dead Letter Queue and Replay Debugger
GITHUB.COM/HALCYON-PAST • Shared by Aritro Saha

django-cachalot: Cache Queries With Automatic Invalidation
GITHUB.COM/NORIPYT

fastpybase64: Fast Base64 Encoding and Decoding
GITHUB.COM/SIMDUTF

📆🐍 Upcoming Python Events


Weekly Real Python Office Hours Q&A (Virtual)
November 4, 2026

Canberra Python Meetup
November 5, 2026

Sydney Python User Group (SyPy)
November 5, 2026

PyCon ES 2026
November 6 to November 9, 2026

Python El Salvador Vuelve
November 7, 2026

PyCon Chile 2026
November 14 to November 16, 2026
Happy Pythoning!
Copyright © 2026 PyCoder’s Weekly, All rights reserved.