Abusing Python’s image processing library to vent to the flag via RCE